fluent-plugin-redaction 0.1.2 → 0.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 1517ff0e53dee9e4f17afbbf5cc4d717cc48fc78
-  data.tar.gz: 56535075142c621848f7f4fffa9c8cdd38a54460
+SHA256:
+  metadata.gz: 4aefa5c2167ec270b54ccdcf4fb578ffa447682e07184a6a3a76981afa3b6b72
+  data.tar.gz: e9fba479837d46c34beecdaad2843a1213255bdc915eb11b43b736347fb04bd7
 SHA512:
-  metadata.gz: bbd0efe5eb4e58eefc550452422dc0f6729d7f176760aaa413ac08faae98770121e0001aaf96faa9ad069c11974ac6508ea86596b1570cd2672f7f88a61f4618
-  data.tar.gz: f87814ca8b34f24a1334b8e031a796b66135dc6dc547561e719636d8b9ee556c0130cd54e1f95f8b9c45271a31a9234e1126059445e5ca780fe043825ef3214c
+  metadata.gz: '00754936e2ede674066c2feb7dd31fb18d68550b2b51f363e2be55309b2e5eca366a7f48c063105cf765e09fc01107ecb002a0829d1a2cb40f9b84f29df48b54'
+  data.tar.gz: bf67b889c7c4f0c116faf918df719263adfe8a8493cf7c13fb6073c21838668a211622676b5ec1dcd218f427e15ad70b3ac5c637e449a39c855e7bd55945318d

data/.github/workflows/build.yml

@@ -0,0 +1,25 @@
+name: Build Gem
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+    branches:
+      - master
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@ec02537da5712d66d4d50a0f33b7eb52773b5ed1
+        with:
+          ruby-version: '2.7'
+
+      - name: Build gem
+        run: make gem

data/.github/workflows/publish.yml

@@ -0,0 +1,32 @@
+name: Publish Gem
+
+on:
+  push:
+    tags:
+      - '*'
+
+env:
+  RUBYGEMS_USER: ${{ secrets.RUBYGEMS_USER }}
+  RUBYGEMS_PASSWORD: ${{ secrets.RUBYGEMS_PASSWORD }}
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@ec02537da5712d66d4d50a0f33b7eb52773b5ed1
+        with:
+          ruby-version: '2.7'
+
+      - name: Publish gem
+        run: |
+          curl -u $RUBYGEMS_USER:$RUBYGEMS_PASSWORD https://rubygems.org/api/v1/api_key.yaml > ~/.gem/credentials
+          chmod 0600 ~/.gem/credentials
+          make push
+        env:
+          RUBYGEMS_USER: ${{ secrets.RUBYGEMS_USER }}
+          RUBYGEMS_PASSWORD: ${{ secrets.RUBYGEMS_PASSWORD }}

data/VERSION

@@ -1 +1 @@
-0.1.2
+0.1.3

data/lib/fluent/plugin/filter_redaction.rb

@@ -58,7 +58,7 @@ module Fluent
                                 record_value = record_value.gsub(rule[1], rule[2])
                             end
                         end
-                        record[key] = record_value
+                        @accessors[key].set(record, record_value)
                     end
                 end
                 record

data/test/plugin/test_filter_redaction.rb

@@ -26,6 +26,14 @@ class RubyFilterTest < Test::Unit::TestCase
     </rule>
   ]
 
+    CUSTOMIZED_REDACT_PATTERN_CONFIG = %[
+      <rule>
+        pattern /(?-i)eyJ(?i)[a-z0-9\-_%]+\.(?-i)eyJ(?i)[a-z0-9\-_%]+\.[a-z0-9\-_%]+/
+        key $.properties.userId
+        replace "[REDACTED]"
+      </rule>
+  ]
+
   setup do
     Fluent::Test.setup
   end
@@ -54,4 +62,13 @@ class RubyFilterTest < Test::Unit::TestCase
     end
   end
 
+  sub_test_case 'filter' do
+    test 'Filter JWT token from hello messages with nested key input' do
+      msg = {'properties' => {'userId' => 'Bearer eyJlola1H9jIq.eyJo1Zdmd8sHuz.KahSbdi9'}}
+      es  = emit(msg, CUSTOMIZED_REDACT_PATTERN_CONFIG)
+      assert_equal("Bearer [REDACTED]", "#{es[0][1]["properties"]["userId"]}")
+      assert_not_equal("Bearer [REDACTED]", "#{es[0][1]["$.properties.userId"]}")
+      assert_equal("", "#{es[0][1]["$.properties.userId"]}")
+    end
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: fluent-plugin-redaction
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.1.3
 platform: ruby
 authors:
 - Oliver Szabo
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-02-10 00:00:00.000000000 Z
+date: 2023-07-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: fluentd
@@ -92,8 +92,9 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".github/workflows/build.yml"
+- ".github/workflows/publish.yml"
 - ".gitignore"
-- ".travis.yml"
 - Gemfile
 - LICENSE
 - Makefile
@@ -123,11 +124,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.5.1
+rubygems_version: 3.1.6
 signing_key: 
 specification_version: 4
 summary: Fluentd redaction filter plugin for anonymize specific strings in text data.
-test_files:
-- test/helper.rb
-- test/plugin/test_filter_redaction.rb
+test_files: []

data/.travis.yml

@@ -1,13 +0,0 @@
-language: ruby
-
-rvm:
-  - 2.4
-
-gemfile:
- - Gemfile
-
-branches:
-  only:
-    - master
-
-script: bundle exec rake test