From 2db573e625d985729cf9877c8d7336831dcea1c3 Mon Sep 17 00:00:00 2001
From: Vladimir Mandic <mandic00@live.com>
Date: Thu, 1 May 2025 12:56:07 -0400
Subject: [PATCH] log gated access

Signed-off-by: Vladimir Mandic <mandic00@live.com>
---
 CHANGELOG.md           | 1 +
 modules/modelloader.py | 5 +++--
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5c85183e5..e351a68e3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -21,6 +21,7 @@
   - Styles: save style with prompt  
   - Texture tiling: fix apply when switching models  
   - Diffusers: slow initial startup  
+  - Gated access: obfuscate and log token used for access  
 
 ## Highlights for 2025-04-28
 
diff --git a/modules/modelloader.py b/modules/modelloader.py
index 7bbb4f341..15ecb7dbe 100644
--- a/modules/modelloader.py
+++ b/modules/modelloader.py
@@ -26,7 +26,7 @@ def hf_login(token=None):
     global loggedin # pylint: disable=global-statement
     token = token or shared.opts.huggingface_token
     install('hf_xet', quiet=True)
-    if token is None or len(token) <= 2:
+    if token is None or len(token) <= 4:
         log.debug('HF login: no token provided')
         return False
     if os.environ.get('HUGGING_FACE_HUB_TOKEN', None) is not None:
@@ -41,8 +41,9 @@ def hf_login(token=None):
             hf.logout()
             hf.login(token=token, add_to_git_credential=False, write_permission=False)
         text = stdout.getvalue() or ''
+        obfuscated_token = 'hf_...' + token[-4:]
         line = [l for l in text.split('\n') if 'Token' in l]
-        log.info(f'HF login: token="{hf.constants.HF_TOKEN_PATH}" {line[0] if len(line) > 0 else text}')
+        log.info(f'HF login: token="{obfuscated_token}" fn="{hf.constants.HF_TOKEN_PATH}" {line[0] if len(line) > 0 else text}')
         loggedin = token
     return True