strongmind-platform-sdk 3.34.1 → 3.34.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fd51875610b6504f5d6cdc31e8384443b384e90ed25a5293d34a1592eba93180
-  data.tar.gz: fbd570234a1128e37a2b8e8dfc408fce6a98cc995486855e6bf600df736a795d
+  metadata.gz: '028ca313c6f9bce49fb5b02e6f929b2ed0939f191938d450d5433647e6ef644b'
+  data.tar.gz: 71e0174a2f1929f7acad9727f71c4286ba9791b5f02a0a011a23485de2d22886
 SHA512:
-  metadata.gz: 30f9636c5de88c33b9e005d7c68cb351c2ebf44e69fab99c10e3c80f9ef9ed62c69e6e2b1c701d6fb96de6c958ee7814ad69fb2819c57a17595c95cdbccce328
-  data.tar.gz: 68fe58679f511b353f348d5fd5c4624b856858127026293b1a8ef175be3ceb9b9d8d4d9999a5dfa3ad3ee7dc206a65fe2ca3fefc1b9640d59a34595ac13ce441
+  metadata.gz: fc53e003fdc583a4afc1c0ea2cd8e4253a23f44f38d08849b2d56c2a57d625e876cadb668df2bbbbdc705ef2d0b57362462baf27336f9fa05e337841b321aebc
+  data.tar.gz: b4a08cd44666bbc7c467afc211f92084b55942609231d121b04e3bee5078a6577be028b0556e8352d080f1695be0055e582250f59775db58a73d607a92c18e9a

data/lib/platform_sdk/identity/error_handleable.rb

@@ -4,12 +4,7 @@ module PlatformSdk
   module Identity
     # Error handling for Identity SDK
     module ErrorHandleable
-      # The logged payload is the raw request body, which for token endpoints
-      # carries client credentials; redact those fields (form-encoded and
-      # JSON shapes) so an auth outage can't write secrets to consumer logs.
-      SENSITIVE_KEYS = 'client_secret|client_assertion|refresh_token|password'
-      FORM_SECRET_PATTERN = /(#{SENSITIVE_KEYS})=[^&]*/i
-      JSON_SECRET_PATTERN = /("(?:#{SENSITIVE_KEYS})"\s*:\s*")[^"]*(")/i
+      REDACTED = '[REDACTED]'
 
       def with_rescue
         yield
@@ -22,12 +17,9 @@ module PlatformSdk
       end
 
       def raise_error_with_payload(exception_class, error)
-        Rails.logger.info(error_log_payload(exception_class, error).to_json) if defined?(Rails)
-        # The exception itself carries error.response on to consumer
-        # instrumentation (Sentry, custom error handlers), so the raw
-        # request body/headers - which can hold a client_secret or bearer
-        # token - must be scrubbed here too, not just in the log line above.
-        raise exception_class, scrub_response(error.response)
+        payload = error_log_payload(exception_class, error)
+        Rails.logger.info(payload.to_json) if defined?(Rails)
+        raise exception_class.new(error_message(payload), scrub_response(error.response)), cause: nil
       end
 
       # No ActiveSupport here (String#demodulize): this must work for
@@ -36,25 +28,20 @@ module PlatformSdk
       def error_log_payload(exception_class, error)
         {
           exception: exception_class.name.split('::').last,
-          payload: scrub_secrets(error.response.dig(:request, :body)),
+          method: error.response.dig(:request, :method),
+          path: error.response.dig(:request, :url_path),
           response_body: error.response[:body],
           status: error.response[:status]
         }.compact
       end
 
-      def scrub_secrets(body)
-        return body unless body.is_a?(String)
+      def error_message(payload)
+        message = "the server responded with status #{payload[:status]}"
+        return message unless payload[:method] && payload[:path]
 
-        body.gsub(FORM_SECRET_PATTERN) { "#{Regexp.last_match(1)}=[REDACTED]" }
-            .gsub(JSON_SECRET_PATTERN, '\1[REDACTED]\2')
+        "#{message} for #{payload[:method].to_s.upcase} #{payload[:path]}"
       end
 
-      # Returns a scrubbed copy of the Faraday error response hash; the
-      # original (and its nested :request hash) are left untouched. Only
-      # [:request][:body] and [:request][:headers] are touched -
-      # [:status] and [:body] (the response body) are read elsewhere
-      # (e.g. e.response&.dig(:status), e.response&.dig(:body, 'paramName'))
-      # and must reach consumers unchanged.
       def scrub_response(response)
         return response unless response.is_a?(Hash)
 
@@ -65,7 +52,9 @@ module PlatformSdk
 
       def scrub_request(request)
         scrubbed_request = request.dup
-        scrubbed_request[:body] = scrub_secrets(request[:body]) if request[:body].is_a?(String)
+        scrubbed_request[:body] = REDACTED if request.key?(:body)
+        scrubbed_request[:params] = REDACTED if request.key?(:params)
+        scrubbed_request[:url] = request[:url_path] if request.key?(:url)
         scrubbed_request[:headers] = scrub_headers(request[:headers]) if request[:headers].is_a?(Hash)
         scrubbed_request
       end
@@ -75,7 +64,7 @@ module PlatformSdk
       def scrub_headers(headers)
         scrubbed = headers.dup
         scrubbed.each_key do |key|
-          scrubbed[key] = '[REDACTED]' if key.to_s.casecmp('authorization').zero?
+          scrubbed[key] = REDACTED if key.to_s.casecmp('authorization').zero?
         end
         scrubbed
       end

data/lib/platform_sdk/version.rb

@@ -3,7 +3,7 @@
 module PlatformSdk
   MAJOR = 3
   MINOR = 34
-  PATCH = 1
+  PATCH = 2
 
   VERSION = "#{PlatformSdk::MAJOR}.#{PlatformSdk::MINOR}.#{PlatformSdk::PATCH}".freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: strongmind-platform-sdk
 version: !ruby/object:Gem::Version
-  version: 3.34.1
+  version: 3.34.2
 platform: ruby
 authors:
 - Platform Team
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-10-12 00:00:00.000000000 Z
+date: 2026-10-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: base64
@@ -392,7 +392,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
+rubygems_version: 3.4.19
 signing_key:
 specification_version: 4
 summary: This gem is intended to provide clients and models for accessing the Platform