From 5e86c78c46a81f8570b86cb6806cb9f463aba058 Mon Sep 17 00:00:00 2001
From: Allen Porter <allen@thebends.org>
Date: Mon, 29 Nov 2021 00:59:01 -0800
Subject: [PATCH] Redact ?auth= url parameters in stream sources when logged
 (#60438)

---
 homeassistant/components/stream/__init__.py | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/homeassistant/components/stream/__init__.py b/homeassistant/components/stream/__init__.py
index 77e946770e6..731a610abf9 100644
--- a/homeassistant/components/stream/__init__.py
+++ b/homeassistant/components/stream/__init__.py
@@ -55,12 +55,17 @@ from .hls import HlsStreamOutput, async_setup_hls
 
 _LOGGER = logging.getLogger(__name__)
 
-STREAM_SOURCE_RE = re.compile("//.*:.*@")
+STREAM_SOURCE_REDACT_PATTERN = [
+    (re.compile(r"//.*:.*@"), "//****:****@"),
+    (re.compile(r"\?auth=.*"), "?auth=****"),
+]
 
 
 def redact_credentials(data: str) -> str:
     """Redact credentials from string data."""
-    return STREAM_SOURCE_RE.sub("//****:****@", data)
+    for (pattern, repl) in STREAM_SOURCE_REDACT_PATTERN:
+        data = pattern.sub(repl, data)
+    return data
 
 
 def create_stream(