@jaypie/express 1.2.14 → 1.2.16

package/dist/cjs/index.cjs

@@ -1512,6 +1512,11 @@ const decorateResponse = (res, { handler = "", version = process.env.PROJECT_VER
 // about the environment's secret parameters, the special adapter,
 // HTTP, etc.  There must be a better way to organize this
 
+//
+//
+// Constants
+//
+const SENSITIVE_HEADERS = new Set(["authorization", "cookie", "set-cookie"]);
 //
 //
 // Function Definition
@@ -1522,10 +1527,19 @@ function summarizeRequest(req) {
     if (Buffer.isBuffer(body)) {
         body = body.toString();
     }
+    // Redact sensitive headers
+    const headers = {
+        ...req.headers,
+    };
+    for (const key of Object.keys(headers)) {
+        if (SENSITIVE_HEADERS.has(key.toLowerCase())) {
+            headers[key] = logger$2.redactAuth(headers[key]);
+        }
+    }
     return {
         baseUrl: req.baseUrl,
         body,
-        headers: req.headers,
+        headers,
         method: req.method,
         query: req.query,
         url: req.url,
@@ -1795,14 +1809,18 @@ function expressHandler(handlerOrOptions, optionsOrHandler) {
         //
         // Preprocess
         //
+        // Build a request-local setup list to avoid mutating the shared array
+        const requestSetup = [];
         // Load secrets into process.env if configured
         if (secrets && secrets.length > 0) {
             const secretsToLoad = secrets;
             const secretsSetup = async () => {
                 await aws.loadEnvSecrets(...secretsToLoad);
             };
-            setup.unshift(secretsSetup);
+            requestSetup.push(secretsSetup);
         }
+        // Add shared setup functions
+        requestSetup.push(...setup);
         if (locals) {
             // Locals
             const keys = Object.keys(locals);
@@ -1821,7 +1839,7 @@ function expressHandler(handlerOrOptions, optionsOrHandler) {
                         }
                     }
                 };
-                setup.push(localsSetup);
+                requestSetup.push(localsSetup);
             }
         }
         let response;
@@ -1832,7 +1850,7 @@ function expressHandler(handlerOrOptions, optionsOrHandler) {
             jaypieFunction = kit.jaypieHandler(handler, {
                 chaos,
                 name,
-                setup,
+                setup: requestSetup,
                 teardown,
                 unavailable,
                 validate,
@@ -2143,14 +2161,18 @@ function expressStreamHandler(handlerOrOptions, optionsOrHandler) {
         //
         // Preprocess
         //
+        // Build a request-local setup list to avoid mutating the shared array
+        const requestSetup = [];
         // Load secrets into process.env if configured
         if (secrets && secrets.length > 0) {
             const secretsToLoad = secrets;
             const secretsSetup = async () => {
                 await aws.loadEnvSecrets(...secretsToLoad);
             };
-            setup.unshift(secretsSetup);
+            requestSetup.push(secretsSetup);
         }
+        // Add shared setup functions
+        requestSetup.push(...setup);
         if (locals) {
             const keys = Object.keys(locals);
             if (keys.length > 0) {
@@ -2168,7 +2190,7 @@ function expressStreamHandler(handlerOrOptions, optionsOrHandler) {
                         }
                     }
                 };
-                setup.push(localsSetup);
+                requestSetup.push(localsSetup);
             }
         }
         try {
@@ -2176,7 +2198,7 @@ function expressStreamHandler(handlerOrOptions, optionsOrHandler) {
             jaypieFunction = kit.jaypieHandler(handler, {
                 chaos,
                 name,
-                setup,
+                setup: requestSetup,
                 teardown,
                 unavailable,
                 validate,