strongmind-platform-sdk 3.27.0 → 3.27.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 810243f0c080ad6d0d3de344f35be529792ed8f8b46a2e26ec73d848cc2ec55b
-  data.tar.gz: f194d6d594cd91f90dd5cb61ef73963d2616c8ed15ac34b5dfc976a2d37f14c2
+  metadata.gz: 86fe0c35c4207ef1d50c8dd075adbcc03b2565fd92ae8674117659671a1ac7db
+  data.tar.gz: eb012bca4d3cecac88a9c0f1858414f8363c0eb907dd6c593146c8df0706fea6
 SHA512:
-  metadata.gz: 0f8a9dcb3b3084e352f3dcac40ca9f2cc59ef951e8124483ac06790cd065f555a25f08b4018bc74d7e77b06083683783bf0e8cbf000f1af1a37f55f85fb0c022
-  data.tar.gz: 77cfa7f41f67166ff0107134aaf07ca0d44d3075cb44fd4c12ccb3f4903fe9ae117acc90f2530f28e99090b724f1cbb6d28dec23fe881fbbcd358cf8457a9f7a
+  metadata.gz: da6fb6510b8a2e86704b1837de5aa0998869bed9b49e45d8562bfddd867fcf5e219829336d695117f32b439a3fbd3a5b6cd890ad3361d41182cadd0062a6d3dd
+  data.tar.gz: 4513cc43b5a6b4420998a50aa4cdc2c2b9012915b7fb4e9591b7e702052ef9d2b5e5620ae42299ff3e03a2d34f45ae9386abe55427cfad58dbc924921218583d

data/lib/platform_sdk/sentry/pii_scrubber.rb

@@ -0,0 +1,72 @@
+# frozen_string_literal: true
+
+require 'active_support/parameter_filter'
+
+module PlatformSdk
+  module Sentry
+    class PiiScrubber
+      DEFAULT_PII_FIELDS = [
+        :email, /\Aname\z/i, :first_name, :last_name, :student_name, :username,
+        :phone, :phone_number, :address, :street, :city, :zip, :postal_code,
+        :ssn, :social_security, :date_of_birth, :dob, :birthday,
+        :ip_address, /\Aip\z/i, :remote_ip,
+        :password, :password_confirmation, :token, :secret, :api_key, :authorization
+      ].freeze
+
+      FILTERED = '[FILTERED]'
+
+      attr_reader :filter
+
+      def initialize(additional_fields: [])
+        fields = DEFAULT_PII_FIELDS + additional_fields
+        @filter = ActiveSupport::ParameterFilter.new(fields, mask: FILTERED)
+      end
+
+      def scrub_hash(hash)
+        return {} unless hash.is_a?(Hash)
+
+        filter.filter(hash)
+      end
+
+      def scrub_event(event)
+        event.user = scrub_user(event.user) if event.user.is_a?(Hash)
+        event.extra = scrub_hash(event.extra) if event.extra.is_a?(Hash)
+        event.contexts = scrub_hash(event.contexts) if event.contexts.is_a?(Hash)
+
+        scrub_request(event.request) if event.request
+
+        event
+      end
+
+      EMAIL_REGEX = /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/
+
+      def scrub_breadcrumb(breadcrumb)
+        breadcrumb.data = scrub_hash(breadcrumb.data) if breadcrumb.data.is_a?(Hash)
+        breadcrumb.message = scrub_message(breadcrumb.message) if breadcrumb.message
+
+        breadcrumb
+      end
+
+      private
+
+      def scrub_message(message)
+        message.gsub(EMAIL_REGEX, FILTERED)
+      end
+
+      def scrub_user(user_hash)
+        id = user_hash[:id] || user_hash['id']
+        scrubbed = scrub_hash(user_hash)
+        scrubbed[:id] = id if user_hash.key?(:id)
+        scrubbed['id'] = id if user_hash.key?('id')
+        scrubbed
+      end
+
+      def scrub_request(request)
+        request.data = scrub_hash(request.data) if request.data.is_a?(Hash)
+        request.headers = scrub_hash(request.headers) if request.headers.is_a?(Hash)
+        request.query_string = FILTERED if request.query_string
+        request.cookies = FILTERED if request.cookies
+      end
+    end
+  end
+end

data/lib/platform_sdk/sentry.rb

@@ -1,7 +1,30 @@
 # frozen_string_literal: true
 
+require_relative 'sentry/pii_scrubber'
+
 module PlatformSdk
   module Sentry
+    def self.apply_pii_protection(config, additional_fields: [])
+      config.send_default_pii = false
+      config.include_local_variables = false
+
+      scrubber = PiiScrubber.new(additional_fields: additional_fields)
+
+      config.before_send = lambda do |event, _hint|
+        scrubber.scrub_event(event)
+      end
+
+      config.before_breadcrumb = lambda do |breadcrumb, _hint|
+        scrubber.scrub_breadcrumb(breadcrumb)
+      end
+
+      config.before_send_transaction = lambda do |event, _hint|
+        return nil if sentry_ignored(event)
+
+        scrubber.scrub_event(event)
+      end
+    end
+
     def self.sentry_ignored(event, ignored_urls = sentry_ignored_urls)
       return false if event.transaction_info[:source] != :url
       return true if ignored_urls.any? { |url| event.transaction.match?(url) }

data/lib/platform_sdk/version.rb

@@ -3,7 +3,7 @@
 module PlatformSdk
   MAJOR = 3
   MINOR = 27
-  PATCH = 0
+  PATCH = 1
 
   VERSION = "#{PlatformSdk::MAJOR}.#{PlatformSdk::MINOR}.#{PlatformSdk::PATCH}"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: strongmind-platform-sdk
 version: !ruby/object:Gem::Version
-  version: 3.27.0
+  version: 3.27.1
 platform: ruby
 authors:
 - Platform Team
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-04-03 00:00:00.000000000 Z
+date: 2026-04-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -297,6 +297,7 @@ files:
 - lib/platform_sdk/power_school/client.rb
 - lib/platform_sdk/power_school/special_program.rb
 - lib/platform_sdk/sentry.rb
+- lib/platform_sdk/sentry/pii_scrubber.rb
 - lib/platform_sdk/sidekiq.rb
 - lib/platform_sdk/sidekiq/ecs_task_protection_middleware.rb
 - lib/platform_sdk/spec_support.rb