Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Prisma Migrate Failure exposes database connection parameters

See original GitHub issue

Bug description

Upon a permission failure in accessing the database, schema or tables, prisma migrate will error and expose the full database connection parameters to the logs.

How to reproduce

Steps to reproduce the behavior:

Setup PRISMA schema and adapter (I was connecting in node to postgres)
Create a migration
Run the migration but change the db permission to deny access
See error

Expected behavior

A database error without the credentials and connection properties being exposed

Prisma information

datasource db {
  provider = "postgresql"
  url      = env("POSTGRES_URL")
}

The error

actual values replaced with xxxx

with self=PostgresFlavour { url: PostgresUrl { url: Url { scheme: "postgresql", username: "xxxx", password: Some("xxxx"), host: Some(Domain("xxxx")), port: Some(5432), path: "/xxxx", query: Some("schema=xxx&statement_cache_size=0"), fragment: None }, query_params: PostgresUrlQueryParams { ssl_params: SslParams { certificate_file: None, identity_file: None, identity_password: <HIDDEN>, ssl_accept_mode: AcceptInvalidCerts }, connection_limit: None, schema: "xxxx", ssl_mode: Prefer, pg_bouncer: false, host: None, socket_timeout: None, connect_timeout: Some(5s), pool_timeout: Some(10s), statement_cache_size: 0 } }, features: BitFlags<MigrationFeature>(0b0) } connection=Connection(Postgres(PostgresUrl { url: Url { scheme: "xxxx", username: "xxxx", password: Some("xxxx"), host: Some(Domain("xxxx")), port: Some(5432), path: "/xxxx", query: Some("schema=xxxx&statement_cache_size=0"), fragment: None }, query_params: PostgresUrlQueryParams { ssl_params: SslParams { certificate_file: None, identity_file: None, identity_password: <HIDDEN>, ssl_accept_mode: AcceptInvalidCerts }, connection_limit: None, schema: "bambee-payroll", ssl_mode: Prefer, pg_bouncer: false, host: None, socket_timeout: None, connect_timeout: Some(5s), pool_timeout: Some(10s), statement_cache_size: 0 } }))