@riocrypto/common-server 1.0.1712 → 1.0.1714

package/build/services/logger.d.ts

@@ -2,6 +2,7 @@ import { Logger } from "winston";
 declare class LoggerService {
     private logger;
     constructor();
+    private maskSensitiveData;
     getLogger(): Logger;
     initLogger(): Promise<void>;
 }

package/build/services/logger.js

@@ -11,9 +11,61 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 Object.defineProperty(exports, "__esModule", { value: true });
 const common_1 = require("@riocrypto/common");
 const winston_1 = require("winston");
-const MAX_LEVEL = "info";
 class LoggerService {
     constructor() {
+        this.maskSensitiveData = (0, winston_1.format)((info) => {
+            // Mask sensitive headers
+            if (info.metadata && info.metadata.req && info.metadata.req.headers) {
+                const headers = info.metadata.req.headers;
+                const headerKeysToMask = [
+                    "x-api-key",
+                    "x-admin-api-key",
+                    "x-cluster-api-key",
+                ];
+                headerKeysToMask.forEach((key) => {
+                    if (headers[key]) {
+                        headers[key] = "***MASKED***"; // Replace with your masking preference
+                    }
+                });
+                if (headers.cookie) {
+                    headers.cookie = headers.cookie
+                        .split("; ")
+                        .map((cookie) => {
+                        const [key, value] = cookie.split("=");
+                        if (key === "accessToken" || key === "adminAccessCookie") {
+                            return `${key}=***MASKED***`; // Mask the sensitive cookie
+                        }
+                        return cookie; // Return unmodified if not sensitive
+                    })
+                        .join("; ");
+                }
+            }
+            // Mask sensitive request body fields
+            if (info.metadata && info.metadata.req && info.metadata.req.body) {
+                const requestBodyFieldsToMask = [
+                    "password",
+                    "newPassword",
+                    "securityAnswer",
+                    "code",
+                    "authenticatorCode",
+                ];
+                requestBodyFieldsToMask.forEach((field) => {
+                    if (info.metadata.req.body.hasOwnProperty(field)) {
+                        info.metadata.req.body[field] = "***MASKED***"; // Replace with your masking preference
+                    }
+                });
+            }
+            // Mask sensitive response body fields
+            if (info.metadata && info.metadata.res && info.metadata.res.body) {
+                const responseBodyFieldsToMask = ["secret", "value"];
+                responseBodyFieldsToMask.forEach((field) => {
+                    if (info.metadata.res.body.hasOwnProperty(field)) {
+                        info.metadata.res.body[field] = "***MASKED***"; // Replace with your masking preference
+                    }
+                });
+            }
+            return info;
+        });
         this.logger = null;
     }
     getLogger() {
@@ -25,14 +77,13 @@ class LoggerService {
     initLogger() {
         return __awaiter(this, void 0, void 0, function* () {
             if (process.env.RIO_ENV === common_1.RioEnv.Production) {
-                // Initialize logger for production environment with "info" level.
-                const { getWinsonTransport } = yield require("@hyperdx/node-opentelemetry");
+                const { getWinstonTransport } = yield require("@hyperdx/node-opentelemetry");
                 this.logger = (0, winston_1.createLogger)({
-                    level: MAX_LEVEL,
-                    format: winston_1.format.combine(winston_1.format.timestamp(), winston_1.format.json(), winston_1.format.metadata(), winston_1.format.prettyPrint()),
+                    level: "info",
+                    format: winston_1.format.combine(winston_1.format.timestamp(), this.maskSensitiveData(), winston_1.format.json(), winston_1.format.prettyPrint()),
                     transports: [
                         new winston_1.transports.Console(),
-                        getWinsonTransport(MAX_LEVEL, {
+                        getWinstonTransport("info", {
                             apiKey: process.env.HYPERDX_API_KEY,
                             service: process.env.OTEL_SERVICE_NAME,
                         }),
@@ -40,10 +91,9 @@ class LoggerService {
                 });
             }
             else {
-                // Initialize logger for local environment with "error" level.
                 this.logger = (0, winston_1.createLogger)({
                     level: "error",
-                    format: winston_1.format.combine(winston_1.format.timestamp(), winston_1.format.json(), winston_1.format.metadata(), winston_1.format.prettyPrint()),
+                    format: winston_1.format.combine(winston_1.format.timestamp(), this.maskSensitiveData(), winston_1.format.json(), winston_1.format.metadata(), winston_1.format.prettyPrint()),
                     transports: [new winston_1.transports.Console()],
                 });
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riocrypto/common-server",
-  "version": "1.0.1712",
+  "version": "1.0.1714",
   "description": "",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -26,7 +26,7 @@
     "@google-cloud/secret-manager": "^5.3.0",
     "@google-cloud/storage": "^6.9.5",
     "@hyperdx/node-opentelemetry": "^0.4.2",
-    "@riocrypto/common": "^1.0.1502",
+    "@riocrypto/common": "^1.0.1505",
     "@types/express": "^4.17.13",
     "axios": "^1.6.0",
     "crypto-js": "^4.2.0",