rack-graphql 3.8.0 → 3.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1dae49ce19bfc15635ecbc96b8577aac5670c9ff7c4d8a3d49b89f0e84d416d0
-  data.tar.gz: a758aacdbf0c85b4292cea6f58c3df71f6ac1c4e9cd7ed78fd509f0c36d6eb0b
+  metadata.gz: a0f357c7f34664d705a55ffa4b90709ce68971d6e7d400a6dc8d1ce30d7e46b9
+  data.tar.gz: 53ff62e96f121b0f1cf1100464c8304fcc66721796edafcf5e0835321a02c82a
 SHA512:
-  metadata.gz: d4b52740f5d98d7b3e6947737700f371040edd5dbb3bf3dabb8f134793a5dedd135edf33bf9d5682bd4dc1b0f164f1b21ea4774159a43e15752c1adc3d7ea682
-  data.tar.gz: 22be795ea42e466bcb2320c1b5ecfa6a2c78801dadb55e5c64b45849690561c16423fd344db368f8f2adb2bc83ecd4aeed7f8197dc972f345ca98f4db5b7a250
+  metadata.gz: 200a45fa61a54367725c2da022d75c5527ff5a4e6b188a5d79f060e7e17e365a35fde87c73590d1f6d19272f694b32cd3a70e45bb3dfe7a87bbbeadbc0675cd2
+  data.tar.gz: 90fc7cfc3f0f7e135b9d4d6a4858dbddd294a13570666b8caebe64c41d01f0f91aa8281c96b5f807a8e3a285ceb1e874a8e7e44da8aa9957a1eaa5bf0b46a938

data/.bundler-version

@@ -1 +1,2 @@
-2.6.3
+2.6.9
+

data/.github/PULL_REQUEST_TEMPLATE.md

@@ -2,5 +2,5 @@
 <!--- Describe your changes in detail -->
 <!--- Why is this change required? What problem does it solve? -->
 
-## Related issue(s) or PR(s)
-<!--- GH issue number -->
+## Related tickets(s), PR(s) or slack message:
+<!--- Ticket/Issue/PR number or URL -->

data/CHANGELOG.md

@@ -1,5 +1,8 @@
 # CHANGELOG
 
+## 3.9.0 - 2025-05-29
+- Ability to provide secret scrubber, so sensitive values are not logged
+
 ## 3.8.0 - 2025-02-05
 - Ruby 3.4 support. Drop ruby 3.2 support.
 

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    rack-graphql (3.8.0)
+    rack-graphql (3.9.0)
       graphql (~> 2.0)
       json (>= 2.8.0)
       rack (>= 2.2.6)
@@ -9,29 +9,31 @@ PATH
 GEM
   remote: https://rubygems.org/
   specs:
-    ast (2.4.2)
+    ast (2.4.3)
     awesome_print (1.9.2)
     base64 (0.2.0)
     coderay (1.1.3)
-    diff-lcs (1.5.1)
-    fiber-storage (1.0.0)
-    graphql (2.4.9)
+    diff-lcs (1.6.2)
+    fiber-storage (1.0.1)
+    graphql (2.5.7)
       base64
       fiber-storage
       logger
-    json (2.9.1)
-    language_server-protocol (3.17.0.4)
-    logger (1.6.5)
+    json (2.12.0)
+    language_server-protocol (3.17.0.5)
+    lint_roller (1.1.0)
+    logger (1.7.0)
     method_source (1.1.0)
-    parallel (1.26.3)
-    parser (3.3.7.1)
+    parallel (1.27.0)
+    parser (3.3.8.0)
       ast (~> 2.4.1)
       racc
+    prism (1.4.0)
     pry (0.15.2)
       coderay (~> 1.1)
       method_source (~> 1.0)
     racc (1.8.1)
-    rack (3.1.9)
+    rack (3.1.15)
     rack-test (2.2.0)
       rack (>= 1.3)
     rainbow (3.1.1)
@@ -41,31 +43,35 @@ GEM
       rspec-core (~> 3.13.0)
       rspec-expectations (~> 3.13.0)
       rspec-mocks (~> 3.13.0)
-    rspec-core (3.13.2)
+    rspec-core (3.13.3)
       rspec-support (~> 3.13.0)
-    rspec-expectations (3.13.3)
+    rspec-expectations (3.13.4)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.13.0)
-    rspec-mocks (3.13.2)
+    rspec-mocks (3.13.4)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.13.0)
-    rspec-support (3.13.2)
-    rubocop (1.71.2)
+    rspec-support (3.13.3)
+    rubocop (1.75.6)
       json (~> 2.3)
-      language_server-protocol (>= 3.17.0)
+      language_server-protocol (~> 3.17.0.2)
+      lint_roller (~> 1.1.0)
       parallel (~> 1.10)
       parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
       regexp_parser (>= 2.9.3, < 3.0)
-      rubocop-ast (>= 1.38.0, < 2.0)
+      rubocop-ast (>= 1.44.0, < 2.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 2.4.0, < 4.0)
-    rubocop-ast (1.38.0)
-      parser (>= 3.3.1.0)
-    rubocop-rake (0.6.0)
-      rubocop (~> 1.0)
-    rubocop-rspec (3.4.0)
-      rubocop (~> 1.61)
+    rubocop-ast (1.44.1)
+      parser (>= 3.3.7.2)
+      prism (~> 1.4)
+    rubocop-rake (0.7.1)
+      lint_roller (~> 1.1)
+      rubocop (>= 1.72.1)
+    rubocop-rspec (3.6.0)
+      lint_roller (~> 1.1)
+      rubocop (~> 1.72, >= 1.72.1)
     ruby-progressbar (1.13.0)
     unicode-display_width (3.1.4)
       unicode-emoji (~> 4.0, >= 4.0.4)

data/lib/rack_graphql/application.rb

@@ -12,7 +12,8 @@ module RackGraphql
       health_on_root_path: health_route,
       root_path_app: nil,
       error_status_code_map: {},
-      request_epilogue: -> {}
+      request_epilogue: -> {},
+      secret_scrubber: nil
     )
       ::Rack::Builder.new do
         map '/graphql' do
@@ -25,6 +26,7 @@ module RackGraphql
             log_exception_backtrace:,
             error_status_code_map:,
             request_epilogue:,
+            secret_scrubber:
           )
         end
 

data/lib/rack_graphql/middleware.rb

@@ -14,7 +14,8 @@ module RackGraphql
       log_exception_backtrace: RackGraphql.log_exception_backtrace,
       re_raise_exceptions: false,
       error_status_code_map: {},
-      request_epilogue: -> {}
+      request_epilogue: -> {},
+      secret_scrubber: nil
     )
       @schema = schema
       @app_name = app_name
@@ -24,6 +25,7 @@ module RackGraphql
       @re_raise_exceptions = re_raise_exceptions
       @error_status_code_map = error_status_code_map
       @request_epilogue = request_epilogue || -> {}
+      @secret_scrubber = secret_scrubber || ->(value) { value }
     end
 
     def call(env)
@@ -37,7 +39,7 @@ module RackGraphql
       operation_name = params['operationName']
       context = context_handler.call(env)
 
-      log("Executing with params: #{params.inspect}, operationName: #{operation_name}, variables: #{variables.inspect}")
+      log("Executing with params: #{secret_scrubber.call(params)}, operationName: #{operation_name}, variables: #{secret_scrubber.call(variables)}")
       result = execute(params:, operation_name:, variables:, context:)
       status_code = response_status(result)
 
@@ -48,7 +50,7 @@ module RackGraphql
       ]
     rescue AmbiguousParamError => e
       exception_string = dump_exception(e)
-      log(exception_string)
+      log_error(exception_string)
       env[Rack::RACK_ERRORS].puts(exception_string)
       env[Rack::RACK_ERRORS].flush
       [
@@ -62,7 +64,7 @@ module RackGraphql
       # so they cannot be caught by error tracking rack middlewares.
       # You can change this behavior via `re_raise_exceptions` argument.
       exception_string = dump_exception(e)
-      log(exception_string)
+      log_error(exception_string)
 
       raise e if re_raise_exceptions
 
@@ -83,7 +85,7 @@ module RackGraphql
 
     attr_reader :schema, :app_name, :logger, :context_handler,
       :log_exception_backtrace, :error_status_code_map,
-      :re_raise_exceptions, :request_epilogue
+      :re_raise_exceptions, :request_epilogue, :secret_scrubber
 
     def post_request?(env)
       env['REQUEST_METHOD'] == 'POST'
@@ -187,9 +189,11 @@ module RackGraphql
     end
 
     def log(message)
-      return unless logger
+      logger&.info("[rack-graphql] #{message}")
+    end
 
-      logger.info("[rack-graphql] #{message}")
+    def log_error(message)
+      logger&.error("[rack-graphql] #{message}")
     end
 
     # Based on https://github.com/rack/rack/blob/master/lib/rack/show_exceptions.rb

data/lib/rack_graphql/version.rb

@@ -1,3 +1,3 @@
 module RackGraphql
-  VERSION = '3.8.0'.freeze
+  VERSION = '3.9.0'.freeze
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: rack-graphql
 version: !ruby/object:Gem::Version
-  version: 3.8.0
+  version: 3.9.0
 platform: ruby
 authors:
 - Krzysztof Knapik
 bindir: exe
 cert_chain: []
-date: 2025-02-05 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: graphql
@@ -105,7 +105,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.3
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Rack middleware implementing graphql endpoint.
 test_files: []