I am currently using the Microsoft Graph Java SDK to change a user's password like so:

graphServiceClient
  .me()
  .changePassword(currentPassword, newPassword)
  .buildRequest()
  .post();

However, when the Graph API throws an exception, the change password request is written to the log with the passwords displaying in plain text! Is there a way of hiding this sensitive information? For now, I have added a custom logger the Graph Server Client which in effect suppresses logging but I was wondering if there was something more fine grained in the SDK?