@riocrypto/common-server 1.0.1715 → 1.0.1717

package/build/clients/axios-with-logging.js

@@ -6,11 +6,39 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const axios_1 = __importDefault(require("axios"));
 const logger_1 = __importDefault(require("../services/logger"));
 const axiosWithLogging = axios_1.default.create();
+const sensitiveHeaders = [
+    "Authorization",
+    "x-api-key",
+    "Api-Key",
+    "x-cluster-api-key",
+    "X-API-KEY",
+    "CB-ACCESS-KEY",
+    "CB-ACCESS-SIGN",
+    "CB-ACCESS-TIMESTAMP",
+    "CB-ACCESS-PASSPHRASE",
+];
+function maskHeaderValue(value) {
+    return value.length > 4
+        ? "*".repeat(value.length - 4) + value.slice(-4)
+        : value;
+}
+// Masking function to selectively mask headers
+function maskHeaders(headers) {
+    const maskedHeaders = Object.assign({}, headers);
+    Object.keys(maskedHeaders).forEach((header) => {
+        if (sensitiveHeaders.includes(header)) {
+            maskedHeaders[header] = maskHeaderValue(maskedHeaders[header]);
+        }
+    });
+    return maskedHeaders;
+}
 // Request Interceptor
 axiosWithLogging.interceptors.request.use((config) => {
     var _a;
-    // Combine and log the full request configuration
-    const logMessage = `Request: method=${config.method}, url=${config.url}, headers=${JSON.stringify(config.headers)}, data=${JSON.stringify(config.data)}`;
+    // Mask sensitive headers in the configuration
+    const maskedHeaders = maskHeaders(config.headers);
+    // Combine and log the full request configuration with masked headers
+    const logMessage = `Request: method=${config.method}, url=${config.url}, headers=${JSON.stringify(maskedHeaders)}, data=${JSON.stringify(config.data)}`;
     ((_a = logger_1.default.getLogger()) === null || _a === void 0 ? void 0 : _a.info(logMessage)) || console.log(logMessage);
     return config;
 }, (error) => {

package/build/services/logger.d.ts

@@ -2,6 +2,7 @@ import { Logger } from "winston";
 declare class LoggerService {
     private logger;
     constructor();
+    private maskValue;
     private maskSensitiveData;
     getLogger(): Logger;
     initLogger(): Promise<void>;

package/build/services/logger.js

@@ -15,8 +15,8 @@ class LoggerService {
     constructor() {
         this.maskSensitiveData = (0, winston_1.format)((info) => {
             // Mask sensitive headers
-            if (info.metadata && info.metadata.req && info.metadata.req.headers) {
-                const headers = info.metadata.req.headers;
+            if (info.meta && info.meta.req && info.meta.req.headers) {
+                const headers = info.meta.req.headers;
                 const headerKeysToMask = [
                     "x-api-key",
                     "x-admin-api-key",
@@ -24,16 +24,21 @@ class LoggerService {
                 ];
                 headerKeysToMask.forEach((key) => {
                     if (headers[key]) {
-                        headers[key] = "***MASKED***"; // Replace with your masking preference
+                        headers[key] = this.maskValue(headers[key]); // Use maskValue function
                     }
                 });
+                // Mask cookies specifically
                 if (headers.cookie) {
                     headers.cookie = headers.cookie
                         .split("; ")
                         .map((cookie) => {
                         const [key, value] = cookie.split("=");
-                        if (key === "accessToken" || key === "adminAccessCookie") {
-                            return `${key}=***MASKED***`; // Mask the sensitive cookie
+                        if (key === "accessToken" ||
+                            key === "adminAccessToken" ||
+                            key === "refreshToken" ||
+                            key === "adminRefreshToken" ||
+                            key === "phoneVerifiedJWT") {
+                            return `${key}=${this.maskValue(value)}`; // Mask the sensitive cookie
                         }
                         return cookie; // Return unmodified if not sensitive
                     })
@@ -41,7 +46,7 @@ class LoggerService {
                 }
             }
             // Mask sensitive request body fields
-            if (info.metadata && info.metadata.req && info.metadata.req.body) {
+            if (info.meta && info.meta.req && info.meta.req.body) {
                 const requestBodyFieldsToMask = [
                     "password",
                     "newPassword",
@@ -50,17 +55,17 @@ class LoggerService {
                     "authenticatorCode",
                 ];
                 requestBodyFieldsToMask.forEach((field) => {
-                    if (info.metadata.req.body.hasOwnProperty(field)) {
-                        info.metadata.req.body[field] = "***MASKED***"; // Replace with your masking preference
+                    if (info.meta.req.body.hasOwnProperty(field)) {
+                        info.meta.req.body[field] = this.maskValue(info.meta.req.body[field]); // Use maskValue function
                     }
                 });
             }
             // Mask sensitive response body fields
-            if (info.metadata && info.metadata.res && info.metadata.res.body) {
+            if (info.meta && info.meta.res && info.meta.res.body) {
                 const responseBodyFieldsToMask = ["secret", "value"];
                 responseBodyFieldsToMask.forEach((field) => {
-                    if (info.metadata.res.body.hasOwnProperty(field)) {
-                        info.metadata.res.body[field] = "***MASKED***"; // Replace with your masking preference
+                    if (info.meta.res.body.hasOwnProperty(field)) {
+                        info.meta.res.body[field] = this.maskValue(info.meta.res.body[field]); // Use maskValue function
                     }
                 });
             }
@@ -68,6 +73,11 @@ class LoggerService {
         });
         this.logger = null;
     }
+    maskValue(value) {
+        return value.length > 4
+            ? "*".repeat(value.length - 4) + value.slice(-4)
+            : value;
+    }
     getLogger() {
         if (!this.logger) {
             return null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riocrypto/common-server",
-  "version": "1.0.1715",
+  "version": "1.0.1717",
   "description": "",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",