Possible to hide secrets in the pactflow web UI? We have some authentication API in our contract tests where we pass an authentication token. This appears in plaintext in the web UI under

Interactions

. To avoid revealing the tokens (for example, in customer demos), is it possible to mask this information in the web UI? Similar to how Github and GitLab do in CI build logs by matching user-configured secrets.

Oh. Why are you using real tokens in contract tests? I thought you were asking about PactFlow secrets, but these are separate things

We don't use real tokens in contract tests. But the same "fake" token needs to be configured on the provider for the authentication test to be successful (and hence, the contract to be verified). That could be a potential risk.

this is really designed for controlled test environments, but I can see that some people could run these against live environments (generally a bad practice)

Hmm, now that I think about it, forget everything I said. This is a non-issue (at least for us). We load our provider in a docker container for the contract verification, and dispose of it immediately after the contract verification is done. So as long as we don't use any token that's used in some real deployed instance, we should be fine I guess.

yeah, that’s how you’d usually use it