fluent-plugin-redaction 0.1.1 → 0.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: d93595968d8df40cf99e1563081e809377e07f53
-  data.tar.gz: 23382d169de9a4d53bbeaef730f52cf28eca837a
+SHA256:
+  metadata.gz: 4aefa5c2167ec270b54ccdcf4fb578ffa447682e07184a6a3a76981afa3b6b72
+  data.tar.gz: e9fba479837d46c34beecdaad2843a1213255bdc915eb11b43b736347fb04bd7
 SHA512:
-  metadata.gz: 5cdbc265ed8cda989fddbc1a50fdbe77aac750f51c85e4bd9e1062c007d4eb2295f800edbfa5d6bb24297a9545ecf4fc4c834ed60f2e2c1adac873f2206de2f6
-  data.tar.gz: 142ddc35771741392442dc51e47cb9d816125aeb169fa101f9d58ceb68f8b8e480243e3b41847e47f65e6f5b18f673bf93e07ae6d9b93bf74c423bbec5c769d1
+  metadata.gz: '00754936e2ede674066c2feb7dd31fb18d68550b2b51f363e2be55309b2e5eca366a7f48c063105cf765e09fc01107ecb002a0829d1a2cb40f9b84f29df48b54'
+  data.tar.gz: bf67b889c7c4f0c116faf918df719263adfe8a8493cf7c13fb6073c21838668a211622676b5ec1dcd218f427e15ad70b3ac5c637e449a39c855e7bd55945318d

data/.github/workflows/build.yml

@@ -0,0 +1,25 @@
+name: Build Gem
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+    branches:
+      - master
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@ec02537da5712d66d4d50a0f33b7eb52773b5ed1
+        with:
+          ruby-version: '2.7'
+
+      - name: Build gem
+        run: make gem

data/.github/workflows/publish.yml

@@ -0,0 +1,32 @@
+name: Publish Gem
+
+on:
+  push:
+    tags:
+      - '*'
+
+env:
+  RUBYGEMS_USER: ${{ secrets.RUBYGEMS_USER }}
+  RUBYGEMS_PASSWORD: ${{ secrets.RUBYGEMS_PASSWORD }}
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@ec02537da5712d66d4d50a0f33b7eb52773b5ed1
+        with:
+          ruby-version: '2.7'
+
+      - name: Publish gem
+        run: |
+          curl -u $RUBYGEMS_USER:$RUBYGEMS_PASSWORD https://rubygems.org/api/v1/api_key.yaml > ~/.gem/credentials
+          chmod 0600 ~/.gem/credentials
+          make push
+        env:
+          RUBYGEMS_USER: ${{ secrets.RUBYGEMS_USER }}
+          RUBYGEMS_PASSWORD: ${{ secrets.RUBYGEMS_PASSWORD }}

data/README.md

@@ -1,4 +1,4 @@
-# Fluentd Filter Redaction Plugin
+# Redaction filter plugin for Fluentd
 
 [![Build Status](https://travis-ci.org/oleewere/fluent-plugin-redaction.svg?branch=master)](https://travis-ci.org/oleewere/fluent-plugin-redaction)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
@@ -30,7 +30,7 @@ $ gem install fluent-plugin-redaction
     <rule>
       key message
       value myemail@mail.com
-      replace ****@mail.com
+      replace "****@mail.com"
     </rule>
     <rule>
       key message
@@ -39,7 +39,7 @@ $ gem install fluent-plugin-redaction
     <rule>
       key message
       pattern /my_regex_pattern/
-      replace [REDACTED]
+      replace "[REDACTED]"
     </rule>
   </filter>
 ```

data/VERSION

@@ -1 +1 @@
-0.1.1
+0.1.3

data/lib/fluent/plugin/filter_redaction.rb

@@ -55,10 +55,10 @@ module Fluent
                             if rule[0]
                                 record_value = record_value.gsub(rule[0], rule[2])
                             else
-                                record_value = record_value.gsub(rule[1], rule[3])
+                                record_value = record_value.gsub(rule[1], rule[2])
                             end
                         end
-                        record[key] = record_value
+                        @accessors[key].set(record, record_value)
                     end
                 end
                 record

data/test/plugin/test_filter_redaction.rb

@@ -22,10 +22,18 @@ class RubyFilterTest < Test::Unit::TestCase
     pattern /(hell)/
     <rule>
       key message
-      value hell
+      pattern /(hell)/
     </rule>
   ]
 
+    CUSTOMIZED_REDACT_PATTERN_CONFIG = %[
+      <rule>
+        pattern /(?-i)eyJ(?i)[a-z0-9\-_%]+\.(?-i)eyJ(?i)[a-z0-9\-_%]+\.[a-z0-9\-_%]+/
+        key $.properties.userId
+        replace "[REDACTED]"
+      </rule>
+  ]
+
   setup do
     Fluent::Test.setup
   end
@@ -54,4 +62,13 @@ class RubyFilterTest < Test::Unit::TestCase
     end
   end
 
+  sub_test_case 'filter' do
+    test 'Filter JWT token from hello messages with nested key input' do
+      msg = {'properties' => {'userId' => 'Bearer eyJlola1H9jIq.eyJo1Zdmd8sHuz.KahSbdi9'}}
+      es  = emit(msg, CUSTOMIZED_REDACT_PATTERN_CONFIG)
+      assert_equal("Bearer [REDACTED]", "#{es[0][1]["properties"]["userId"]}")
+      assert_not_equal("Bearer [REDACTED]", "#{es[0][1]["$.properties.userId"]}")
+      assert_equal("", "#{es[0][1]["$.properties.userId"]}")
+    end
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: fluent-plugin-redaction
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.3
 platform: ruby
 authors:
 - Oliver Szabo
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-01-26 00:00:00.000000000 Z
+date: 2023-07-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: fluentd
@@ -92,8 +92,9 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".github/workflows/build.yml"
+- ".github/workflows/publish.yml"
 - ".gitignore"
-- ".travis.yml"
 - Gemfile
 - LICENSE
 - Makefile
@@ -123,11 +124,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.5.1
+rubygems_version: 3.1.6
 signing_key: 
 specification_version: 4
 summary: Fluentd redaction filter plugin for anonymize specific strings in text data.
-test_files:
-- test/helper.rb
-- test/plugin/test_filter_redaction.rb
+test_files: []

data/.travis.yml

@@ -1,13 +0,0 @@
-language: ruby
-
-rvm:
-  - 2.4
-
-gemfile:
- - Gemfile
-
-branches:
-  only:
-    - master
-
-script: bundle exec rake test