@riocrypto/common-server 1.0.2936 → 1.0.2937
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/build/services/logger.js +5 -0
- package/package.json +2 -2
package/build/services/logger.js
CHANGED
|
@@ -298,7 +298,12 @@ class LoggerService {
|
|
|
298
298
|
this.setupConsoleMasking();
|
|
299
299
|
this.setupStreamMasking();
|
|
300
300
|
}
|
|
301
|
+
// Attribution fields (adminAuthId etc.) contain "auth" but are identifiers,
|
|
302
|
+
// not credentials. They are exempt here as well as in the body path so the
|
|
303
|
+
// access log meta that every service sets via dynamicMeta stays correlatable.
|
|
301
304
|
isSensitiveKey(key) {
|
|
305
|
+
if (this.attributionBodyFields.has(this.normalizeKey(key)))
|
|
306
|
+
return false;
|
|
302
307
|
const lower = key.toLowerCase();
|
|
303
308
|
return this.sensitiveSubstrings.some((sub) => lower.includes(sub));
|
|
304
309
|
}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@riocrypto/common-server",
|
|
3
|
-
"version": "1.0.
|
|
3
|
+
"version": "1.0.2937",
|
|
4
4
|
"description": "",
|
|
5
5
|
"main": "./build/index.js",
|
|
6
6
|
"types": "./build/index.d.ts",
|
|
@@ -28,7 +28,7 @@
|
|
|
28
28
|
"@google-cloud/secret-manager": "^5.6.0",
|
|
29
29
|
"@google-cloud/storage": "^7.19.0",
|
|
30
30
|
"@hyperdx/node-opentelemetry": "^0.10.3",
|
|
31
|
-
"@riocrypto/common": "1.0.
|
|
31
|
+
"@riocrypto/common": "1.0.2733",
|
|
32
32
|
"@slack/web-api": "^7.15.0",
|
|
33
33
|
"@types/express": "^4.17.25",
|
|
34
34
|
"axios": "1.18.1",
|