@checkly/playwright-core 1.51.17-beta.5 → 1.51.18-beta.1

package/lib/checkly/secretsFilter.js

@@ -17,9 +17,18 @@ const dynamicallyAddedSecrets = new Set();
 let cachedAuthorizationHeaderSecrets = null;
 const extractAuthorizationHeaderValue = authorizationHeaderValue => {
   const spaceIndex = authorizationHeaderValue.indexOf(' ');
-  return spaceIndex === -1 ? authorizationHeaderValue : authorizationHeaderValue.split(' ')[1];
+  if (spaceIndex === -1) return authorizationHeaderValue;
+  return authorizationHeaderValue.slice(spaceIndex + 1);
 };
 
+/**
+ * We use diagnostics_channel.subscribe to intercept HTTP(S) requests not made through
+ * Playwright's request fixture. The request fixture outputs the Authorization header
+ * value before executing the request, but direct Node.js HTTP calls bypass this mechanism.
+ * By subscribing to these diagnostic channels, we can capture authorization secrets from
+ * all HTTP requests made in the test environment.
+ */
+
 // For http/https
 diagnostics_channel.subscribe('http.client.request.start', message => {
   const {

package/lib/client/fetch.js

@@ -222,7 +222,7 @@ class APIRequestContext extends _channelOwner.ChannelOwner {
 
       // [Checkly] We need to parse the headers in case there is the Authorization one.
       for (const header of headers || []) {
-        if (header.name === 'Authorization') (0, _secretsFilter.addSecret)(header.value);
+        if (header.name.toLowerCase() === 'authorization') (0, _secretsFilter.addSecret)(header.value);
       }
       // [/Checkly]
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@checkly/playwright-core",
-  "version": "1.51.17-beta.5",
+  "version": "1.51.18-beta.1",
   "description": "A high-level API to automate web browsers",
   "repository": {
     "type": "git",