I have searched the existing issues and discussions.
Problem Description
Right now, the tool config containing UserValves info is logged here.
That means that for tools which use user-supplied API token (like Jira and Confluence search) these user tokens are being logged as part of the valves.
Desired Solution you'd like
Add the ability to turn the logging of tools config on/off.
Alternatives Considered
User valves can be completely removed from tools config when logging to avoid leaking any sensitive information.
Alternatively, logging level can be reduced to DEBUG.
Additional Context
No response
Originally created by @mijovicmia on GitHub (Mar 31, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/12233
### Check Existing Issues
- [x] I have searched the existing issues and discussions.
### Problem Description
Right now, the tool config containing UserValves info is logged [here](https://github.com/open-webui/open-webui/blob/main/backend/open_webui/utils/middleware.py#L785).
That means that for tools which use user-supplied API token (like Jira and Confluence search) these user tokens are being logged as part of the valves.
### Desired Solution you'd like
Add the ability to turn the logging of tools config on/off.
### Alternatives Considered
User valves can be completely removed from tools config when logging to avoid leaking any sensitive information.
Alternatively, logging level can be reduced to DEBUG.
### Additional Context
_No response_
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @mijovicmia on GitHub (Mar 31, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/12233
Check Existing Issues
Problem Description
Right now, the tool config containing UserValves info is logged here.
That means that for tools which use user-supplied API token (like Jira and Confluence search) these user tokens are being logged as part of the valves.
Desired Solution you'd like
Add the ability to turn the logging of tools config on/off.
Alternatives Considered
User valves can be completely removed from tools config when logging to avoid leaking any sensitive information.
Alternatively, logging level can be reduced to DEBUG.
Additional Context
No response
@tjbck commented on GitHub (Mar 31, 2025):
Addressed with
fac848ad33