FreeSWITCH CI: Mask the nonce in logs

Author: andywolk

.github/actions/repo-auth-client/action.yml

@@ -62,6 +62,14 @@ runs:
                 f"https://${{ inputs.domain }}/auth.php", session
             )
 
+            if not nonce:
+                print("Error: Received empty nonce from server")
+                sys.exit(1)
+
+            # Mask the nonce in logs to prevent exposure
+            print(f'::add-mask::{nonce}')
+            print("Nonce retrieved and masked successfully")
+
             with open(os.getenv('GITHUB_OUTPUT'), 'a') as f:
                 f.write(f'nonce={nonce}\n')
         except Exception as e:
@@ -106,6 +114,14 @@ runs:
                 f'https://${{ inputs.domain }}/?{urlencode({"verify": "${{ env.NONCE }}"})}', session
             )
 
+            if not token:
+                print("Error: Received empty token from server")
+                sys.exit(1)
+
+            # Mask the token in logs to prevent exposure
+            print(f'::add-mask::{token}')
+            print("Token issued and masked successfully")
+
             with open(os.getenv('GITHUB_OUTPUT'), 'a') as f:
                 f.write(f'token={token}\n')
         except Exception as e: