Automation: Hidden headers

[#1]

Hi everyone! I’m back again with a quick update on a new feature available to anyone currently using the Send web request action. We received some feedback from the community that people would like the ability to obfuscate headers that are sent with your web request when you’re attaching secrets, API keys or any other sensitive value to your request. We’ve gone ahead and given you the ability to do this, so let me show you how it works:

Add the “Hidden” flag to your headers

Your headers in both new and existing rules using the Send web request action now have an additional option. Below, you can see that a “Hidden” checkbox is available to you:

When you select this option on a header, you’ll notice that the value is now obfuscated:

If you go ahead and publish your rule, navigating back to the Send web request action will show you that the value you selected is permanently hidden, and cannot be shown again.

Once the value is hidden, it can’t be unhidden. However, you can always edit both the name and value of the header, or remove the header completely.

Once a rule is published with Hidden headers, the value will never be available for viewing in the automation platform. The value is masked as it’s sent back to you, so you won’t be able to inspect any payload to view the value either. You can find more information on how this works here.

Until next time!

Thanks again for checking in. The Automation team is always hard at work listening to your much appreciated feedback, so please feel free to comment below telling us what you’d like to see next from us.

Thanks a bunch!

[Ignacio Pulgar]

These are great news! Thank you very much! :)

[Hana Kučerová]

Fantastic! Thank you!

[Manon Soubies-Camy]

That's great! Thanks 🙌

[Julia Foden]

Thank you! I had mentioned this in my call with the new Product Manager, great to see that it has been worked on so quickly !

[Yatish Madhav]

Hey @Liam Tan - this is a real nice feature! Makes me and security happy! Thanks for this post ... I wil be using this going forward ...

Quick question, is it possible to have something like this available for the Create Variable action as well? Is there a ticket I can watch and upvote?

Thanks for this again.

[Patrick Lowry]

Is this only available in Jira Cloud? I'm on Jira Server and don't see this option 

[Simmo]

Hi @Patrick Lowry,

I'm afraid that at the moment this is a Cloud only feature.