fix: hide sensitive info when listing targets (#1289)

Signed-off-by: Luka Brecic <[email protected]>

pkg/api/controllers/target/list.go

@@ -4,6 +4,7 @@
 package target
 
 import (
+	"encoding/json"
 	"fmt"
 	"net/http"
 
@@ -30,5 +31,40 @@ func ListTargets(ctx *gin.Context) {
 		return
 	}
 
+	for _, target := range targets {
+		p, err := server.ProviderManager.GetProvider(target.ProviderInfo.Name)
+		if err != nil {
+			target.Options = fmt.Sprintf("Error: %s", err.Error())
+			continue
+		}
+
+		manifest, err := (*p).GetTargetManifest()
+		if err != nil {
+			target.Options = fmt.Sprintf("Error: %s", err.Error())
+			continue
+		}
+
+		var opts map[string]interface{}
+		err = json.Unmarshal([]byte(target.Options), &opts)
+		if err != nil {
+			target.Options = fmt.Sprintf("Error: %s", err.Error())
+			continue
+		}
+
+		for name, property := range *manifest {
+			if property.InputMasked {
+				delete(opts, name)
+			}
+		}
+
+		updatedOptions, err := json.MarshalIndent(opts, "", "  ")
+		if err != nil {
+			target.Options = fmt.Sprintf("Error: %s", err.Error())
+			continue
+		}
+
+		target.Options = string(updatedOptions)
+	}
+
 	ctx.JSON(200, targets)
 }