When hasura has a remote schema error (such as a timeout) it shares all the request details to the client calling it including any internal forwarded header files which can include shared secrets.
Is there a way to prevent it from doing this?
Looks like it has to do with the HASURA_GRAPHQL_DEV_MODE configuration in the docker file, setting this to 'false' or not at all fixes the issue and masks the error.