minato_logger 0.2.10 → 0.2.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 57d9f0d838d1c8ac6885b8cac7ca3037614a3a23d2afe56f4fd23692bd4588f7
-  data.tar.gz: 2cdd696254d65ff2e8afd4ac7b213dee7c961af00708e73ff3d279dba49328f3
+  metadata.gz: 25ff3fcf2b7ed82f3c39ee694c52d9ad81cf4086984441b082a0d46bb286ee5a
+  data.tar.gz: 855bb34c1b70f7ec4fcf2bc737ed72a46eb895383ff0d7c421467e16297c449c
 SHA512:
-  metadata.gz: d09c2618c600ffff9eff3acabdb387223701b21ad7880f8d9a257114f3b363a0da86a9cfc470675baacfec8470eb20324c6c06dae5365c0c57e662732a95ae86
-  data.tar.gz: 8cb3b3e17b147fd79a661a6f8491e5e6902e2acb1fbaad2b5dd3167799c572fec26722142265ca2dc4fb999e0605d76b9ed08d878d39bd8ec3c8cbbcb63ed2e7
+  metadata.gz: f7133120d86d171ab7cfef89a1aceb3f49766b4f138ac3d78786d734e2e4d91dbea77582105a5db24ffe33565e40619d7b15030ae80dc828f57a29df13cf0065
+  data.tar.gz: 790fe184c0a52b9fd8e6c6ea6ae84bb63a68eaab082f8fab64e170b037177365c23199689fb38782239a4df93930ef4682d3e35c7fb136d064658cf695f29890

data/lib/minato_logger/middlewares/request_response_logger.rb

@@ -5,6 +5,12 @@ require 'json'
 module MinatoLogger
   module Middlewares
     class RequestResponseLogger
+      SENSITIVE_HEADERS = %w[
+        AUTHORIZATION PROXY_AUTHORIZATION X_CSRF_TOKEN
+        HTTP_AUTHORIZATION HTTP_PROXY_AUTHORIZATION
+        HTTP_X_CSRF_TOKEN COOKIE HTTP_COOKIE
+      ].freeze
+
       def initialize(app)
         @app = app
       end
@@ -20,21 +26,25 @@ module MinatoLogger
       private
 
       def execute_with_logging(request, env)
-        data = { body: '', status: 500, start_time: current_time }
+        current_time = Process.clock_gettime(Process::CLOCK_MONOTONIC)
+        data = { body: '', status: 500, start_time: current_time, headers: {} }
 
         begin
-          data[:status], headers, response = @app.call(env)
+          data[:status], data[:headers], response = @app.call(env)
           data[:body] = extract_body_safely(response || [])
 
-          [data[:status], headers, [data[:body]]]
+          [data[:status], data[:headers], [data[:body]]]
         ensure
-          log_response(request, env, data.merge({ duration: calculate_duration(data[:start_time]) }))
+          duration = ((current_time - data[:start_time]) * 1000).round(2)
+          log_response(request, env, data.merge({ duration: duration }))
         end
       end
 
       def log_request(request, env)
         log(default_log_data(request, env).merge({
                                                    type: 'REQUEST',
+                                                   headers: extract_request_headers(request),
+                                                   body: extract_request_body(request),
                                                    message: "REQUEST: #{request.method} #{request.fullpath}"
                                                  }))
       end
@@ -56,6 +66,7 @@ module MinatoLogger
         default_log_data(request, env).merge({
                                                type: 'RESPONSE', duration: data[:duration], status: data[:status],
                                                response: safe_parse_json(data[:body]),
+                                               headers: filter_sensitive_headers(data[:headers]),
                                                message: "RESPONSE: #{request.method} #{request.fullpath} - " \
                                                         "#{data[:status]} (#{data[:duration]}ms)"
                                              })
@@ -88,12 +99,36 @@ module MinatoLogger
         body.to_s
       end
 
-      def current_time
-        Process.clock_gettime(Process::CLOCK_MONOTONIC)
+      def extract_request_body(request)
+        return nil unless request.body
+
+        body = request.body.read
+        request.body.rewind
+        safe_parse_json(body)
+      rescue StandardError => e
+        "Error reading request body: #{e}"
       end
 
-      def calculate_duration(start_time)
-        ((current_time - start_time) * 1000).round(2)
+      def extract_request_headers(request)
+        headers = {}
+        request.headers.each do |k, v|
+          next unless k.start_with?('HTTP_') || %w[CONTENT_TYPE CONTENT_LENGTH].include?(k)
+
+          normalized_key = k.start_with?('HTTP_') ? k[5..] : k
+
+          headers[normalized_key] = v
+        end
+
+        filter_sensitive_headers(headers)
+      end
+
+      def filter_sensitive_headers(headers)
+        return {} unless headers.is_a?(Hash)
+
+        headers.reject do |k, _|
+          key = k.to_s.upcase.tr('-', '_')
+          SENSITIVE_HEADERS.any? { |sensitive| key.include?(sensitive) }
+        end
       end
     end
   end

data/lib/minato_logger/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module MinatoLogger
-  VERSION = '0.2.10'
+  VERSION = '0.2.11'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: minato_logger
 version: !ruby/object:Gem::Version
-  version: 0.2.10
+  version: 0.2.11
 platform: ruby
 authors:
 - Ferreri