From 415ce7d8dfab095a9b931e00c075858b9a170633 Mon Sep 17 00:00:00 2001
From: Jacek Chmielewski <jacek@defguard.net>
Date: Thu, 30 Oct 2025 11:12:16 +0100
Subject: [PATCH] don't log enrollment token

---
 src-tauri/src/enterprise/provisioning/mod.rs | 18 ++++++++++++++++--
 1 file changed, 16 insertions(+), 2 deletions(-)

diff --git a/src-tauri/src/enterprise/provisioning/mod.rs b/src-tauri/src/enterprise/provisioning/mod.rs
index a69e434b..377a9b1e 100644
--- a/src-tauri/src/enterprise/provisioning/mod.rs
+++ b/src-tauri/src/enterprise/provisioning/mod.rs
@@ -1,4 +1,4 @@
-use std::{fs, path::Path};
+use std::{fmt, fs, path::Path};
 
 use serde::{Deserialize, Serialize};
 use tauri::{AppHandle, Manager};
@@ -7,12 +7,26 @@ use crate::database::{models::instance::Instance, DB_POOL};
 
 const CONFIG_FILE_NAME: &str = "provisioning.json";
 
-#[derive(Clone, Debug, Deserialize, Serialize)]
+#[derive(Clone, Deserialize, Serialize)]
 pub struct ProvisioningConfig {
     pub enrollment_url: String,
     pub enrollment_token: String,
 }
 
+impl fmt::Debug for ProvisioningConfig {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        let Self {
+            enrollment_url,
+            enrollment_token: _,
+        } = self;
+
+        f.debug_struct("ProvisioningConfig")
+            .field("enrollment_url", enrollment_url)
+            .field("enrollment_token", &"***")
+            .finish()
+    }
+}
+
 impl ProvisioningConfig {
     /// Load configuration from a file at `path`.
     fn load(path: &Path) -> Option<Self> {