Add DisplaySafeUrl newtype to prevent leaking of credentials by default

crates/uv-auth/Cargo.toml

@@ -11,6 +11,7 @@ workspace = true
 
 [dependencies]
 uv-once-map = { workspace = true }
+uv-redacted = { workspace = true }
 uv-small-str = { workspace = true }
 uv-static = { workspace = true }
 uv-warnings = { workspace = true }
@@ -36,5 +37,4 @@ insta = { version = "1.40.0" }
 tempfile = { workspace = true }
 test-log = { version = "0.2.16", features = ["trace"], default-features = false }
 tokio = { workspace = true }
-tracing-test = { workspace = true }
 wiremock = { workspace = true }

crates/uv-auth/src/cache.rs

@@ -9,6 +9,7 @@ use tracing::trace;
 use url::Url;
 
 use uv_once_map::OnceMap;
+use uv_redacted::DisplaySafeUrl;
 
 use crate::Realm;
 use crate::credentials::{Credentials, Username};
@@ -18,7 +19,7 @@ type FxOnceMap<K, V> = OnceMap<K, V, BuildHasherDefault<FxHasher>>;
 #[derive(Debug, Clone, PartialEq, Eq, Hash)]
 pub(crate) enum FetchUrl {
     /// A full index URL
-    Index(Url),
+    Index(DisplaySafeUrl),
     /// A realm URL
     Realm(Realm),
 }

crates/uv-auth/src/credentials.rs

@@ -3,6 +3,8 @@ use base64::read::DecoderReader;
 use base64::write::EncoderWriter;
 use std::borrow::Cow;
 use std::fmt;
+use uv_redacted::DisplaySafeUrl;
+use uv_redacted::DisplaySafeUrlRef;
 
 use netrc::Netrc;
 use reqwest::Request;
@@ -141,7 +143,11 @@ impl Credentials {
     /// Return [`Credentials`] for a [`Url`] from a [`Netrc`] file, if any.
     ///
     /// If a username is provided, it must match the login in the netrc file or [`None`] is returned.
-    pub(crate) fn from_netrc(netrc: &Netrc, url: &Url, username: Option<&str>) -> Option<Self> {
+    pub(crate) fn from_netrc(
+        netrc: &Netrc,
+        url: &DisplaySafeUrlRef<'_>,
+        username: Option<&str>,
+    ) -> Option<Self> {
         let host = url.host_str()?;
         let entry = netrc
             .hosts
@@ -299,7 +305,7 @@ impl Credentials {
     ///
     /// Any existing credentials will be overridden.
     #[must_use]
-    pub fn apply(&self, mut url: Url) -> Url {
+    pub fn apply(&self, mut url: DisplaySafeUrl) -> DisplaySafeUrl {
         if let Some(username) = self.username() {
             let _ = url.set_username(username);
         }

crates/uv-auth/src/index.rs

@@ -2,6 +2,7 @@ use std::fmt::{self, Display, Formatter};
 
 use rustc_hash::FxHashSet;
 use url::Url;
+use uv_redacted::DisplaySafeUrl;
 
 /// When to use authentication.
 #[derive(
@@ -53,10 +54,10 @@ impl Display for AuthPolicy {
 // could potentially make sense for a future refactor.
 #[derive(Debug, Clone, Hash, Eq, PartialEq)]
 pub struct Index {
-    pub url: Url,
+    pub url: DisplaySafeUrl,
     /// The root endpoint where authentication is applied.
     /// For PEP 503 endpoints, this excludes `/simple`.
-    pub root_url: Url,
+    pub root_url: DisplaySafeUrl,
     pub auth_policy: AuthPolicy,
 }
 
@@ -95,7 +96,7 @@ impl Indexes {
     }
 
     /// Get the index URL prefix for a URL if one exists.
-    pub fn index_url_for(&self, url: &Url) -> Option<&Url> {
+    pub fn index_url_for(&self, url: &Url) -> Option<&DisplaySafeUrl> {
         self.find_prefix_index(url).map(|index| &index.url)
     }