octri 1.1.0 → 1.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +10 -0
- data/lib/octri.rb +6 -0
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 30c386e0986ecaad25cd764612997a14fe61120b12257659199155b3ca982cb3
|
|
4
|
+
data.tar.gz: 40e41bdde6dc0f3da903d909fe721588d461fde3e76a6f1958a7d6656ea37506
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: d0c03fdeeb42ef797b3b592f119946337e1c17c2fdecc5b813c08376e6dd0db046ed3c774432c826ed9d731ca68998f87167089c801cc73d2c90762168d90cee
|
|
7
|
+
data.tar.gz: 25338e81385ba2822595d943f7b5c57f51e8cad24640d9d83946ac64743e5a57d599ebfb03d67c834b9a277dad9ed456555b18e1a7d00155288801518be06caf
|
data/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,15 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 1.2.0
|
|
4
|
+
|
|
5
|
+
- Direct identifiers are now redacted by key, the same way credentials are:
|
|
6
|
+
`email`, `phone`, `address`, first/last/full name, `username`, `userAgent`,
|
|
7
|
+
passport, tax and national ids, dates of birth, postal codes, coordinates
|
|
8
|
+
and `ipAddress`, wherever the word appears in a key (`billingEmail`,
|
|
9
|
+
`customer_phone_number`). This matches what every generated SDK already did.
|
|
10
|
+
- The user's `email` is therefore `[redacted]` before sending. The user's `id`
|
|
11
|
+
still survives; it is the identity the dashboard counts affected users by.
|
|
12
|
+
|
|
3
13
|
## 1.1.0
|
|
4
14
|
|
|
5
15
|
- Payloads are now scrubbed before they are sent. Values under keys that name a
|
data/lib/octri.rb
CHANGED
|
@@ -34,9 +34,15 @@ module Octri
|
|
|
34
34
|
# Keys whose value never leaves the process. Compared against the key with case
|
|
35
35
|
# and separators removed, so `api_key`, `apiKey` and `API-KEY` all match
|
|
36
36
|
# `apikey`, and the test is a substring one, so `stripe_secret_key` matches too.
|
|
37
|
+
# Credentials, then direct identifiers, matched the same way: `phone` also
|
|
38
|
+
# covers `phoneNumber` and `customerPhone`, `address` covers `ipAddress` and
|
|
39
|
+
# `billingAddress`. Bare `ip`, `url` and `name` are deliberately absent: as
|
|
40
|
+
# substrings they would take `zip`, `curl` and the error name with them.
|
|
37
41
|
SCRUB_KEYS = %w[
|
|
38
42
|
password passwd passphrase secret token apikey authorization credential
|
|
39
43
|
cookie session privatekey accesskey cardnumber creditcard cvv ssn
|
|
44
|
+
email phone address firstname lastname fullname username useragent passport taxid
|
|
45
|
+
nationalid dateofbirth birthdate birthday postalcode zipcode latitude longitude socialsecurity ipaddress
|
|
40
46
|
].freeze
|
|
41
47
|
|
|
42
48
|
REDACTED = "[redacted]"
|