Invalid CREATE USER pre-hash credential is written verbatim to `observer.log`

Self Checks

• I have read the Contributing Guide.
• This is only for bug report, if you would like to ask a question, please head to Discussions.
• I have searched for existing issues search for existing issues, including closed ones.
• I confirm that I am using English to submit this report, otherwise it will be closed.
• 【中文用户 & Non English User】请使用英语提交，否则会被关闭 ：）
• Please do not modify this template :) and fill in all the required fields.

OceanBase version

OceanBase CE 5.0.2.0, source revision d128661ca4f5b3d167c1928e556d70d2f901baef, Release+ASan.

Self Hosted

Self Hosted (Source)

Environment

Ubuntu 22.04.5 LTS, x86_64, one-zone loopback observer. The credential marker is synthetic. Retained logs were mode 0600.

Steps to reproduce

As root@sys on a disposable cluster, submit an invalid pre-hashed-password form:

CREATE USER edbf_report_credential
  IDENTIFIED BY PASSWORD 'EDBF_REPORT_INVALID_PREHASH_CREDENTIAL';

The statement is rejected. Inspect the new run's observer.log; the complete authoritative log is bundled as artifacts/observer.log:

WDIAG ... Wrong password format(
  user_name=edbf_report_credential,
  password=EDBF_REPORT_INVALID_PREHASH_CREDENTIAL,
  plugin=, ret=-5227)

The sink is src/sql/resolver/dcl/ob_create_user_resolver.cpp:150, in the invalid password-format branch.

artifacts.zip

✔️ Expected Behavior

Credential parsing errors should identify the account and validation rule but redact the supplied credential value.

❌ Actual Behavior

The full rejected value is emitted in a warning diagnostic. This exact trigger uses the IDENTIFIED BY PASSWORD pre-hash input, so this report does not claim that the tested marker was a valid plaintext account password. It is nevertheless credential-bearing input that should not be retained.