fix misstyped passwords leaked in log files with redmine auth provider

mereth

2014-08-18 2445d4b2b80671bdcefbd4ed81f394a5249ee13d

fix misstyped passwords leaked in log files with redmine auth provider

 src/main/java/com/gitblit/auth/RedmineAuthProvider.java

@@ -153,15 +153,16 @@
        if (!url.endsWith("/")) {
            url = url.concat("/");
        }
        String apiUrl = url + "users/current.json";
        
        HttpURLConnection http;
        if (username == null) {
            // apikey authentication
            String apiKey = String.valueOf(password);
            String apiUrl = url + "users/current.json?key=" + apiKey;
            http = (HttpURLConnection) ConnectionUtils.openConnection(apiUrl, null, null);
            http.addRequestProperty("X-Redmine-API-Key", apiKey);
        } else {
            // username/password BASIC authentication
            String apiUrl = url + "users/current.json";
            http = (HttpURLConnection) ConnectionUtils.openConnection(apiUrl, username, password);
        }
        http.setRequestMethod("GET");