mongo_request_logger 0.3.0 → 0.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 660d6aa96f97e5ca818a92abef7fc96544ea2cbd
-  data.tar.gz: 6859e94ceb5658485f79340d52c6798cf3e7db70
+  metadata.gz: d3e669f125a4ab156ae47726a5d04a0b98ecc3e2
+  data.tar.gz: e6e21f9084d3218669afabc377a92df36b833f8e
 SHA512:
-  metadata.gz: 2173487a90d1d0ab9cd8c6a9f406606fbcf0e3e806706dcd4ade311ea820eee7330d3d9f465b6167728b015aa215ab5eead698deba5d59dc164c7f4f2c681381
-  data.tar.gz: fdef6ac1a55a2a2736addde2c160e316d151122e25948a55e8bdba06d6e39bc56ead26e87435eba2fd2eaa0a271e567ce65dc0860e0c779cdeef0048d1357453
+  metadata.gz: 071197c22bff68a10b98732ca5dba433b8675551fda0e83cf7a2fd46a1d4bab538ec53fca8dae3404e3f3d16041631183a2bc2a98b7bca8623c46bf257ce3978
+  data.tar.gz: 8834d88af24fd96b4e760f763a8c449a85e1a80e6e26ae58044e6f4a7c653b9b2bc3e19ab67bdd52fa79d186e458e331ae4fe50f2df0837a2c038e6a3ab4b9b6

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.3.1
+
+* Filter out passwords in parameters.
+
 ## 0.3.0
 
 * Improved config parsing for the Moped driver.

data/lib/mongo_request_logger/rack.rb

@@ -59,7 +59,7 @@ module MongoRequestLogger
                 request_method: request.request_method,
                 content_type: request.content_type,
                 content_length: cl,
-                params: request.params
+                params: filter(request.params)
             }
             logger.add_metadata options
             logger.add_metadata_set :tags, "rack"
@@ -77,5 +77,15 @@ module MongoRequestLogger
       end
 
     end
+
+    def filter(params)
+      filtered = params.dup
+      filtered.each do |key, value|
+        if (key =~ /password/) && value.is_a?(String)
+          filtered[key] = '*filtered*'
+        end
+      end
+      filtered
+    end
   end
 end

data/lib/mongo_request_logger/version.rb

@@ -1,3 +1,3 @@
 module MongoRequestLogger
-  VERSION = '0.3.0'
+  VERSION = '0.3.1'
 end

data/spec/rails_spec.rb

@@ -55,6 +55,14 @@ begin
       result['params'].should == {'a' => '5', 'b' => 'test'}
     end
 
+    it "should filter passwords from parameters" do
+      get '/?my_password=123&username=me'
+
+      result = adapter.query({}).first
+      result['params'].should == {"my_password"=>"*filtered*", 'username' => 'me'}
+    end
+
+
     it "should log post JSON paramters" do
       data = '{"test": "yes"}'
       post '/', {}, {input: data, "CONTENT_TYPE" => 'application/json'}

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: mongo_request_logger
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.3.1
 platform: ruby
 authors:
 - Embark Mobile