field-redactor 1.6.0 → 1.6.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +33 -0
- package/CONTRIBUTING.md +5 -3
- package/README.md +2 -2
- package/dist/api/fieldRedactor.d.ts +3 -5
- package/dist/api/fieldRedactor.d.ts.map +1 -1
- package/dist/api/fieldRedactor.js +7 -11
- package/dist/api/fieldRedactor.js.map +1 -1
- package/dist/api/fieldRedactorConfigBuilder.d.ts +3 -3
- package/dist/api/fieldRedactorConfigBuilder.d.ts.map +1 -1
- package/dist/api/fieldRedactorConfigBuilder.js +7 -9
- package/dist/api/fieldRedactorConfigBuilder.js.map +1 -1
- package/dist/api/fieldRedactorDeps.d.ts +2 -2
- package/dist/api/fieldRedactorDeps.d.ts.map +1 -1
- package/dist/api/fieldRedactorDeps.js +6 -6
- package/dist/api/fieldRedactorDeps.js.map +1 -1
- package/dist/config/presets.d.ts +2 -2
- package/dist/config/presets.js +1 -1
- package/dist/config/redactionRules.d.ts +13 -7
- package/dist/config/redactionRules.d.ts.map +1 -1
- package/dist/config/redactionRules.js +20 -16
- package/dist/config/redactionRules.js.map +1 -1
- package/dist/dryrun/dryRun.d.ts.map +1 -1
- package/dist/dryrun/dryRun.js +2 -2
- package/dist/dryrun/dryRun.js.map +1 -1
- package/dist/engine/arrayRedaction.js +1 -1
- package/dist/engine/arrayRedaction.js.map +1 -1
- package/dist/engine/customObjectFieldHandler.d.ts +4 -9
- package/dist/engine/customObjectFieldHandler.d.ts.map +1 -1
- package/dist/engine/customObjectFieldHandler.js +90 -108
- package/dist/engine/customObjectFieldHandler.js.map +1 -1
- package/dist/engine/objectRedactorCustomObject.d.ts +8 -23
- package/dist/engine/objectRedactorCustomObject.d.ts.map +1 -1
- package/dist/engine/objectRedactorCustomObject.js +8 -40
- package/dist/engine/objectRedactorCustomObject.js.map +1 -1
- package/dist/engine/objectRedactorHelpers.d.ts +3 -4
- package/dist/engine/objectRedactorHelpers.d.ts.map +1 -1
- package/dist/engine/objectRedactorHelpers.js +12 -38
- package/dist/engine/objectRedactorHelpers.js.map +1 -1
- package/dist/engine/objectRedactorTraversal.d.ts +1 -0
- package/dist/engine/objectRedactorTraversal.d.ts.map +1 -1
- package/dist/engine/objectRedactorTraversal.js +2 -1
- package/dist/engine/objectRedactorTraversal.js.map +1 -1
- package/dist/rules/ruleResolver.d.ts +3 -5
- package/dist/rules/ruleResolver.d.ts.map +1 -1
- package/dist/rules/ruleResolver.js +17 -23
- package/dist/rules/ruleResolver.js.map +1 -1
- package/dist/rules/schemaSiblingKey.d.ts +4 -0
- package/dist/rules/schemaSiblingKey.d.ts.map +1 -0
- package/dist/rules/schemaSiblingKey.js +19 -0
- package/dist/rules/schemaSiblingKey.js.map +1 -0
- package/dist/rules/secretManager.d.ts +6 -7
- package/dist/rules/secretManager.d.ts.map +1 -1
- package/dist/rules/secretManager.js +13 -8
- package/dist/rules/secretManager.js.map +1 -1
- package/dist/types.d.ts +12 -12
- package/dist/types.d.ts.map +1 -1
- package/dist/types.js +4 -4
- package/dist/types.js.map +1 -1
- package/dist/util/maybeAsync.d.ts +0 -1
- package/dist/util/maybeAsync.d.ts.map +1 -1
- package/dist/util/maybeAsync.js +1 -3
- package/dist/util/maybeAsync.js.map +1 -1
- package/dist/util/primitiveCoercion.d.ts +4 -0
- package/dist/util/primitiveCoercion.d.ts.map +1 -0
- package/dist/util/primitiveCoercion.js +21 -0
- package/dist/util/primitiveCoercion.js.map +1 -0
- package/docs/guides/anti-patterns.md +1 -1
- package/docs/guides/metadata-redaction.md +2 -2
- package/docs/guides/migration-1.5-to-1.6.md +7 -5
- package/docs/guides/secret-key-modes.md +9 -14
- package/docs/reference/config.md +2 -2
- package/docs/release-notes/README.md +3 -1
- package/docs/release-notes/v1.6.1.md +24 -0
- package/docs/release-notes/v1.6.2.md +26 -0
- package/package.json +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"arrayRedaction.js","sourceRoot":"","sources":["../../src/engine/arrayRedaction.ts"],"names":[],"mappings":";;;AAAA,oCAA+D;AAC/D,qEAAsF;AACtF,mDAAmF;AACnF,mEAAgE;AAGhE,MAAa,aAAa;IACxB,YAA6B,QAA2B;QAA3B,aAAQ,GAAR,QAAQ,CAAmB;IAAG,CAAC;IAE5D,mBAAmB,CACjB,KAAgB,EAChB,GAAW,EACX,kBAA2B,EAC3B,MAAiD,EACjD,YAAoC;QAEpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,4BAA4B,CAAC,GAAG,EAAE,kBAAkB,CAAC;YAC/F,CAAC,CAAC,IAAI,CAAC,oBAAoB,CACvB,KAAK,EACL,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,
|
|
1
|
+
{"version":3,"file":"arrayRedaction.js","sourceRoot":"","sources":["../../src/engine/arrayRedaction.ts"],"names":[],"mappings":";;;AAAA,oCAA+D;AAC/D,qEAAsF;AACtF,mDAAmF;AACnF,mEAAgE;AAGhE,MAAa,aAAa;IACxB,YAA6B,QAA2B;QAA3B,aAAQ,GAAR,QAAQ,CAAmB;IAAG,CAAC;IAE5D,mBAAmB,CACjB,KAAgB,EAChB,GAAW,EACX,kBAA2B,EAC3B,MAAiD,EACjD,YAAoC;QAEpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,4BAA4B,CAAC,GAAG,EAAE,kBAAkB,CAAC;YAC/F,CAAC,CAAC,IAAI,CAAC,oBAAoB,CACvB,KAAK,EACL,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,eAAe,CAAC,GAAG,EAAE,kBAAkB,CAAC,EACnE,MAAM,CAAC,WAAW,EAClB,YAAY,CACb;YACH,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAEvE,IAAI,QAAQ,YAAY,OAAO,EAAE,CAAC;YAChC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,oBAAoB,CAClB,KAAgB,EAChB,WAAoB,EACpB,YAAoC;QAEpC,MAAM,SAAS,GAAG,IAAA,gDAAuB,EAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAE9D,MAAM,IAAI,GAAG,IAAA,0BAAa,EACxB,KAAK,EACL,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACd,IAAI,CAAC,IAAA,oBAAY,EAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,OAAO;YACT,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,IAAA,gDAAuB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,CAAC,GAAG,YAAY,EAAE,KAAK,CAAC,CAAC;YAC1C,OAAO,IAAA,+BAAkB,EACvB,YAAY;gBACV,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC;gBACvD,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,EAC5D,GAAG,EAAE;gBACH,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/C,CAAC,EACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;QACJ,CAAC,EACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;QAEF,OAAO,IAAA,+BAAkB,EAAC,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrF,CAAC;IAED,oBAAoB,CAClB,KAAgB,EAChB,kBAA2B,EAC3B,WAAoB,EACpB,YAAoC;QAEpC,MAAM,SAAS,GAAG,IAAA,gDAAuB,EAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAE9D,MAAM,IAAI,GAAG,IAAA,0BAAa,EACxB,KAAK,EACL,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACd,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,QAAQ,GAAG,CAAC,GAAG,YAAY,EAAE,KAAK,CAAC,CAAC;YAE1C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;gBAC1F,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;oBAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;wBAC5B,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;oBAC7B,CAAC,CAAC,CAAC;gBACL,CAAC;gBAED,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,IAAI,CAAC,IAAA,oBAAY,EAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE,IAAA,6CAAqB,EAAC,IAAI,CAAC,CAAC,CAAC;YACjF,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,IAAA,gDAAuB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YACzD,OAAO,IAAA,+BAAkB,EACvB,YAAY;gBACV,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC;gBACvD,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,EAAE,QAAQ,CAAC,EACzE,GAAG,EAAE;gBACH,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACrC,CAAC,EACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;QACJ,CAAC,EACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;QAEF,OAAO,IAAA,+BAAkB,EAAC,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrF,CAAC;CACF;AA5GD,sCA4GC"}
|
|
@@ -19,17 +19,12 @@ export declare class CustomObjectFieldHandler {
|
|
|
19
19
|
private readonly services;
|
|
20
20
|
constructor(services: TraversalServices);
|
|
21
21
|
handleCustomObject(container: ContainerMutation<JsonObject>, customObject: CustomObject): MaybeAsync<void>;
|
|
22
|
-
private
|
|
23
|
-
private
|
|
24
|
-
private
|
|
22
|
+
private handleField;
|
|
23
|
+
private applyStringKeyRule;
|
|
24
|
+
private applyContainerStringKeyAction;
|
|
25
|
+
private applyMatchTypeRule;
|
|
25
26
|
private setRedactedArray;
|
|
26
|
-
private handleCustomObjectValueIfObject;
|
|
27
|
-
private handleCustomObjectObjectValueIfStringKeySpecified;
|
|
28
|
-
private handleCustomObjectObjectValueIfMatchTypeSpecified;
|
|
29
27
|
private setRedactedObject;
|
|
30
|
-
private handleCustomObjectValueIfPrimitive;
|
|
31
|
-
private handleCustomObjectPrimitiveValueIfMatchTypeSpecified;
|
|
32
|
-
private handleCustomObjectPrimitiveValueIfStringKeySpecified;
|
|
33
28
|
}
|
|
34
29
|
export {};
|
|
35
30
|
//# sourceMappingURL=customObjectFieldHandler.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"customObjectFieldHandler.d.ts","sourceRoot":"","sources":["../../src/engine/customObjectFieldHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EAIZ,UAAU,
|
|
1
|
+
{"version":3,"file":"customObjectFieldHandler.d.ts","sourceRoot":"","sources":["../../src/engine/customObjectFieldHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EAIZ,UAAU,EAGV,oBAAoB,EACrB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,iBAAiB,EAA2B,MAAM,0BAA0B,CAAC;AAGtF,OAAO,EAAsB,UAAU,EAAoC,MAAM,oBAAoB,CAAC;AACtG,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,KAAK,eAAe,GAChB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAIrB,6EAA6E;AAC7E,eAAO,MAAM,kCAAkC,kBAC9B,aAAa,aACjB,oBAAoB,KAC9B,eAcF,CAAC;AAYF,qBAAa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,iBAAiB;IAExD,kBAAkB,CAAC,SAAS,EAAE,iBAAiB,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC;IAQ1G,OAAO,CAAC,WAAW;IAoBnB,OAAO,CAAC,kBAAkB;IA6C1B,OAAO,CAAC,6BAA6B;IAwBrC,OAAO,CAAC,kBAAkB;IAwD1B,OAAO,CAAC,gBAAgB;IAgBxB,OAAO,CAAC,iBAAiB;CAe1B"}
|
|
@@ -4,51 +4,80 @@ exports.CustomObjectFieldHandler = exports.resolveCustomObjectStringKeyAction =
|
|
|
4
4
|
const types_1 = require("../types");
|
|
5
5
|
const objectRedactorMutation_1 = require("./objectRedactorMutation");
|
|
6
6
|
const objectRedactorCustomObject_1 = require("./objectRedactorCustomObject");
|
|
7
|
-
const
|
|
7
|
+
const schemaSiblingKey_1 = require("../rules/schemaSiblingKey");
|
|
8
8
|
const maybeAsync_1 = require("../util/maybeAsync");
|
|
9
9
|
/** Shared delete/opaque/deep/shallow ladder for schema sibling-key rules. */
|
|
10
10
|
const resolveCustomObjectStringKeyAction = (secretManager, stringKey) => {
|
|
11
|
-
|
|
12
|
-
|
|
11
|
+
switch (secretManager.classifyKeyRule(stringKey)) {
|
|
12
|
+
case 'remove':
|
|
13
|
+
return { type: 'remove' };
|
|
14
|
+
case 'opaque':
|
|
15
|
+
return { type: 'opaque' };
|
|
16
|
+
case 'deep':
|
|
17
|
+
return { type: 'traverse', forceDeep: true };
|
|
18
|
+
case 'shallow':
|
|
19
|
+
case 'default':
|
|
20
|
+
return { type: 'traverse', forceDeep: false };
|
|
21
|
+
default:
|
|
22
|
+
return { type: 'none' };
|
|
13
23
|
}
|
|
14
|
-
|
|
15
|
-
|
|
24
|
+
};
|
|
25
|
+
exports.resolveCustomObjectStringKeyAction = resolveCustomObjectStringKeyAction;
|
|
26
|
+
const shapeOf = (value) => {
|
|
27
|
+
if (Array.isArray(value)) {
|
|
28
|
+
return 'array';
|
|
16
29
|
}
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
return { type: 'traverse', forceDeep };
|
|
30
|
+
if ((0, types_1.isJsonObject)(value)) {
|
|
31
|
+
return 'object';
|
|
20
32
|
}
|
|
21
|
-
return
|
|
33
|
+
return 'primitive';
|
|
22
34
|
};
|
|
23
|
-
exports.resolveCustomObjectStringKeyAction = resolveCustomObjectStringKeyAction;
|
|
24
35
|
class CustomObjectFieldHandler {
|
|
25
36
|
constructor(services) {
|
|
26
37
|
this.services = services;
|
|
27
38
|
}
|
|
28
39
|
handleCustomObject(container, customObject) {
|
|
29
|
-
return (0, maybeAsync_1.runSequential)(Object.keys(customObject), (key) =>
|
|
40
|
+
return (0, maybeAsync_1.runSequential)(Object.keys(customObject), (key) => this.handleField(container, key, customObject), this.services.asyncMode);
|
|
41
|
+
}
|
|
42
|
+
handleField(container, key, customObject) {
|
|
43
|
+
const fieldValue = container.source[key];
|
|
44
|
+
const shape = shapeOf(fieldValue);
|
|
45
|
+
const stringKey = (0, schemaSiblingKey_1.getStringSpecifiedCustomObjectSecretKeyValueIfExists)(container.source, customObject, key);
|
|
46
|
+
if (stringKey !== undefined) {
|
|
47
|
+
return this.applyStringKeyRule(container, key, stringKey, shape);
|
|
48
|
+
}
|
|
49
|
+
if (typeof customObject[key] === 'number') {
|
|
50
|
+
return this.applyMatchTypeRule(container, key, customObject[key], shape);
|
|
51
|
+
}
|
|
52
|
+
return undefined;
|
|
53
|
+
}
|
|
54
|
+
applyStringKeyRule(container, key, stringKey, shape) {
|
|
55
|
+
if (shape === 'primitive') {
|
|
56
|
+
const action = (0, exports.resolveCustomObjectStringKeyAction)(this.services.secretManager, stringKey);
|
|
57
|
+
if (action.type === 'remove') {
|
|
58
|
+
container.remove(key);
|
|
59
|
+
return;
|
|
60
|
+
}
|
|
61
|
+
// Opaque/shallow/deep scalar handling stays in setPrimitiveValueIfSecret for value-pattern fallthrough.
|
|
62
|
+
return this.services.setPrimitiveValueIfSecret(container, key, stringKey, container.source[key], false);
|
|
63
|
+
}
|
|
64
|
+
if (shape === 'object') {
|
|
30
65
|
const fieldValue = container.source[key];
|
|
31
|
-
if (
|
|
32
|
-
return
|
|
66
|
+
if (!(0, types_1.isJsonObject)(fieldValue)) {
|
|
67
|
+
return;
|
|
33
68
|
}
|
|
34
|
-
|
|
35
|
-
|
|
69
|
+
const nestedSchema = this.services.ruleResolver.getMatchingSchema(fieldValue);
|
|
70
|
+
if (nestedSchema) {
|
|
71
|
+
const child = (0, objectRedactorMutation_1.createContainerMutation)(fieldValue, container.copyOnWrite);
|
|
72
|
+
return (0, maybeAsync_1.finalizeMaybeAsync)(this.handleCustomObject(child, nestedSchema), () => {
|
|
73
|
+
container.set(key, child.result());
|
|
74
|
+
}, this.services.asyncMode);
|
|
36
75
|
}
|
|
37
|
-
return this.handleCustomObjectValueIfPrimitive(container, customObject, key);
|
|
38
|
-
}, this.services.asyncMode);
|
|
39
|
-
}
|
|
40
|
-
handleCustomObjectValueIfArray(container, key, customObject) {
|
|
41
|
-
const stringKey = (0, objectRedactorHelpers_1.getStringSpecifiedCustomObjectSecretKeyValueIfExists)(container.source, customObject, key);
|
|
42
|
-
if (stringKey !== undefined) {
|
|
43
|
-
return this.handleCustomObjectArrayValueIfStringKeySpecified(container, key, stringKey);
|
|
44
76
|
}
|
|
45
|
-
return this.
|
|
77
|
+
return this.applyContainerStringKeyAction(container, key, stringKey, shape);
|
|
46
78
|
}
|
|
47
|
-
|
|
79
|
+
applyContainerStringKeyAction(container, key, stringKey, shape) {
|
|
48
80
|
const fieldValue = container.source[key];
|
|
49
|
-
if (!Array.isArray(fieldValue)) {
|
|
50
|
-
return;
|
|
51
|
-
}
|
|
52
81
|
const action = (0, exports.resolveCustomObjectStringKeyAction)(this.services.secretManager, stringKey);
|
|
53
82
|
switch (action.type) {
|
|
54
83
|
case 'remove':
|
|
@@ -57,22 +86,47 @@ class CustomObjectFieldHandler {
|
|
|
57
86
|
case 'opaque':
|
|
58
87
|
return this.services.setPrimitiveFromValue(container, key, fieldValue);
|
|
59
88
|
case 'traverse':
|
|
60
|
-
return
|
|
89
|
+
return shape === 'array'
|
|
90
|
+
? this.setRedactedArray(container, key, fieldValue, action.forceDeep)
|
|
91
|
+
: this.setRedactedObject(container, key, fieldValue, action.forceDeep);
|
|
61
92
|
case 'none':
|
|
62
93
|
return;
|
|
63
94
|
}
|
|
64
95
|
}
|
|
65
|
-
|
|
96
|
+
applyMatchTypeRule(container, key, matchType, shape) {
|
|
66
97
|
const fieldValue = container.source[key];
|
|
67
|
-
if (
|
|
98
|
+
if (shape === 'primitive') {
|
|
99
|
+
return (0, maybeAsync_1.resolveMaybeAsync)((0, objectRedactorCustomObject_1.applyCustomObjectMatchType)(matchType, {
|
|
100
|
+
remove: () => container.remove(key),
|
|
101
|
+
opaque: () => this.services.setPrimitiveFromValue(container, key, fieldValue),
|
|
102
|
+
deep: () => this.services.setPrimitive(container, key, fieldValue),
|
|
103
|
+
shallow: () => this.services.setPrimitive(container, key, fieldValue),
|
|
104
|
+
pass: () => undefined
|
|
105
|
+
}), this.services.asyncMode);
|
|
106
|
+
}
|
|
107
|
+
if (shape === 'array') {
|
|
108
|
+
if (!Array.isArray(fieldValue)) {
|
|
109
|
+
return;
|
|
110
|
+
}
|
|
111
|
+
return (0, maybeAsync_1.resolveMaybeAsync)((0, objectRedactorCustomObject_1.applyCustomObjectMatchType)(matchType, {
|
|
112
|
+
remove: () => container.remove(key),
|
|
113
|
+
opaque: () => this.services.setPrimitiveFromValue(container, key, fieldValue),
|
|
114
|
+
deep: () => this.setRedactedArray(container, key, fieldValue, true),
|
|
115
|
+
shallow: () => this.setRedactedArray(container, key, fieldValue, false),
|
|
116
|
+
pass: () => this.services.redactArrayInObject(fieldValue, key, false, container, [])
|
|
117
|
+
}), this.services.asyncMode);
|
|
118
|
+
}
|
|
119
|
+
if (!(0, types_1.isJsonObject)(fieldValue)) {
|
|
68
120
|
return;
|
|
69
121
|
}
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
122
|
+
const traverseShallow = () => this.setRedactedObject(container, key, fieldValue, false);
|
|
123
|
+
return (0, maybeAsync_1.resolveMaybeAsync)((0, objectRedactorCustomObject_1.applyCustomObjectMatchType)(matchType, {
|
|
124
|
+
remove: () => container.remove(key),
|
|
125
|
+
opaque: () => this.services.setPrimitiveFromValue(container, key, fieldValue),
|
|
126
|
+
deep: () => this.setRedactedObject(container, key, fieldValue, true),
|
|
127
|
+
shallow: traverseShallow,
|
|
128
|
+
// Object Pass ≈ shallow traverse (walk nested secrets, keep structure).
|
|
129
|
+
pass: traverseShallow
|
|
76
130
|
}), this.services.asyncMode);
|
|
77
131
|
}
|
|
78
132
|
setRedactedArray(container, key, fieldValue, forceDeepRedaction) {
|
|
@@ -84,84 +138,12 @@ class CustomObjectFieldHandler {
|
|
|
84
138
|
}
|
|
85
139
|
container.set(key, redacted);
|
|
86
140
|
}
|
|
87
|
-
handleCustomObjectValueIfObject(container, key, customObject) {
|
|
88
|
-
const stringKey = (0, objectRedactorHelpers_1.getStringSpecifiedCustomObjectSecretKeyValueIfExists)(container.source, customObject, key);
|
|
89
|
-
if (stringKey !== undefined) {
|
|
90
|
-
return this.handleCustomObjectObjectValueIfStringKeySpecified(container, key, stringKey);
|
|
91
|
-
}
|
|
92
|
-
return this.handleCustomObjectObjectValueIfMatchTypeSpecified(container, key, customObject[key]);
|
|
93
|
-
}
|
|
94
|
-
handleCustomObjectObjectValueIfStringKeySpecified(container, key, stringKey) {
|
|
95
|
-
const fieldValue = container.source[key];
|
|
96
|
-
if (!(0, types_1.isJsonObject)(fieldValue)) {
|
|
97
|
-
return;
|
|
98
|
-
}
|
|
99
|
-
const nestedSchema = this.services.ruleResolver.getMatchingSchema(fieldValue);
|
|
100
|
-
if (nestedSchema) {
|
|
101
|
-
const child = (0, objectRedactorMutation_1.createContainerMutation)(fieldValue, container.copyOnWrite);
|
|
102
|
-
return (0, maybeAsync_1.finalizeMaybeAsync)(this.handleCustomObject(child, nestedSchema), () => {
|
|
103
|
-
container.set(key, child.result());
|
|
104
|
-
}, this.services.asyncMode);
|
|
105
|
-
}
|
|
106
|
-
const action = (0, exports.resolveCustomObjectStringKeyAction)(this.services.secretManager, stringKey);
|
|
107
|
-
switch (action.type) {
|
|
108
|
-
case 'remove':
|
|
109
|
-
container.remove(key);
|
|
110
|
-
return;
|
|
111
|
-
case 'opaque':
|
|
112
|
-
return this.services.setPrimitiveFromValue(container, key, fieldValue);
|
|
113
|
-
case 'traverse':
|
|
114
|
-
return this.setRedactedObject(container, key, fieldValue, action.forceDeep);
|
|
115
|
-
case 'none':
|
|
116
|
-
return;
|
|
117
|
-
}
|
|
118
|
-
}
|
|
119
|
-
handleCustomObjectObjectValueIfMatchTypeSpecified(container, key, matchType) {
|
|
120
|
-
const fieldValue = container.source[key];
|
|
121
|
-
if (!(0, types_1.isJsonObject)(fieldValue)) {
|
|
122
|
-
return;
|
|
123
|
-
}
|
|
124
|
-
return (0, maybeAsync_1.resolveMaybeAsync)((0, objectRedactorCustomObject_1.applyCustomObjectObjectMatchType)(matchType, {
|
|
125
|
-
deleteKey: () => container.remove(key),
|
|
126
|
-
redactFull: () => this.services.setPrimitiveFromValue(container, key, fieldValue),
|
|
127
|
-
redactDeep: () => this.setRedactedObject(container, key, fieldValue, true),
|
|
128
|
-
redactShallowOrPass: () => this.setRedactedObject(container, key, fieldValue, false),
|
|
129
|
-
ignore: () => undefined
|
|
130
|
-
}), this.services.asyncMode);
|
|
131
|
-
}
|
|
132
141
|
setRedactedObject(container, key, fieldValue, forceDeepRedaction) {
|
|
133
142
|
const child = (0, objectRedactorMutation_1.createContainerMutation)(fieldValue, container.copyOnWrite);
|
|
134
143
|
return (0, maybeAsync_1.finalizeMaybeAsync)(this.services.redactSecretFields(child, forceDeepRedaction, []), () => {
|
|
135
144
|
container.set(key, child.result());
|
|
136
145
|
}, this.services.asyncMode);
|
|
137
146
|
}
|
|
138
|
-
handleCustomObjectValueIfPrimitive(container, customObject, key) {
|
|
139
|
-
if (typeof customObject[key] === 'number') {
|
|
140
|
-
return this.handleCustomObjectPrimitiveValueIfMatchTypeSpecified(container, key, customObject[key]);
|
|
141
|
-
}
|
|
142
|
-
const secretKey = (0, objectRedactorHelpers_1.getStringSpecifiedCustomObjectSecretKeyValueIfExists)(container.source, customObject, key);
|
|
143
|
-
if (secretKey === undefined) {
|
|
144
|
-
return;
|
|
145
|
-
}
|
|
146
|
-
return this.handleCustomObjectPrimitiveValueIfStringKeySpecified(container, secretKey, key);
|
|
147
|
-
}
|
|
148
|
-
handleCustomObjectPrimitiveValueIfMatchTypeSpecified(container, key, matchValue) {
|
|
149
|
-
return (0, maybeAsync_1.resolveMaybeAsync)((0, objectRedactorCustomObject_1.applyCustomObjectPrimitiveMatchType)(matchValue, {
|
|
150
|
-
deleteKey: () => container.remove(key),
|
|
151
|
-
redactFull: () => this.services.setPrimitiveFromValue(container, key, container.source[key]),
|
|
152
|
-
redactScalar: () => this.services.setPrimitive(container, key, container.source[key]),
|
|
153
|
-
passThrough: () => undefined
|
|
154
|
-
}), this.services.asyncMode);
|
|
155
|
-
}
|
|
156
|
-
handleCustomObjectPrimitiveValueIfStringKeySpecified(container, secretKey, key) {
|
|
157
|
-
const action = (0, exports.resolveCustomObjectStringKeyAction)(this.services.secretManager, secretKey);
|
|
158
|
-
if (action.type === 'remove') {
|
|
159
|
-
container.remove(key);
|
|
160
|
-
return;
|
|
161
|
-
}
|
|
162
|
-
// Opaque/shallow/deep scalar handling stays in setPrimitiveValueIfSecret for value-pattern fallthrough.
|
|
163
|
-
return this.services.setPrimitiveValueIfSecret(container, key, secretKey, container.source[key], false);
|
|
164
|
-
}
|
|
165
147
|
}
|
|
166
148
|
exports.CustomObjectFieldHandler = CustomObjectFieldHandler;
|
|
167
149
|
//# sourceMappingURL=customObjectFieldHandler.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"customObjectFieldHandler.js","sourceRoot":"","sources":["../../src/engine/customObjectFieldHandler.ts"],"names":[],"mappings":";;;AAAA,
|
|
1
|
+
{"version":3,"file":"customObjectFieldHandler.js","sourceRoot":"","sources":["../../src/engine/customObjectFieldHandler.ts"],"names":[],"mappings":";;;AAAA,oCASkB;AAClB,qEAAsF;AACtF,6EAA0E;AAC1E,gEAAiG;AACjG,mDAAsG;AAYtG,6EAA6E;AACtE,MAAM,kCAAkC,GAAG,CAChD,aAA4B,EAC5B,SAA+B,EACd,EAAE;IACnB,QAAQ,aAAa,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;QACjD,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5B,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5B,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC/C,KAAK,SAAS,CAAC;QACf,KAAK,SAAS;YACZ,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAChD;YACE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC,CAAC;AAjBW,QAAA,kCAAkC,sCAiB7C;AAEF,MAAM,OAAO,GAAG,CAAC,KAA4B,EAAc,EAAE;IAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,IAAA,oBAAY,EAAC,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC;AAEF,MAAa,wBAAwB;IACnC,YAA6B,QAA2B;QAA3B,aAAQ,GAAR,QAAQ,CAAmB;IAAG,CAAC;IAE5D,kBAAkB,CAAC,SAAwC,EAAE,YAA0B;QACrF,OAAO,IAAA,0BAAa,EAClB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EACzB,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,EACvD,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;IACJ,CAAC;IAEO,WAAW,CACjB,SAAwC,EACxC,GAAW,EACX,YAA0B;QAE1B,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,IAAA,uEAAoD,EAAC,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;QAE5G,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,OAAO,YAAY,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,kBAAkB,CACxB,SAAwC,EACxC,GAAW,EACX,SAA+B,EAC/B,KAAiB;QAEjB,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAA,0CAAkC,EAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;YAC1F,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YAED,wGAAwG;YACxG,OAAO,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAC5C,SAAS,EACT,GAAG,EACH,SAAS,EACT,SAAS,CAAC,MAAM,CAAC,GAAG,CAAwB,EAC5C,KAAK,CACN,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC,IAAA,oBAAY,EAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,OAAO;YACT,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;YAC9E,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,IAAA,gDAAuB,EAAC,UAAU,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;gBACzE,OAAO,IAAA,+BAAkB,EACvB,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC,EAC5C,GAAG,EAAE;oBACH,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;gBACrC,CAAC,EACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,6BAA6B,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAEO,6BAA6B,CACnC,SAAwC,EACxC,GAAW,EACX,SAA+B,EAC/B,KAAyB;QAEzB,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAA,0CAAkC,EAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAE1F,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,QAAQ;gBACX,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtB,OAAO;YACT,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;YACzE,KAAK,UAAU;gBACb,OAAO,KAAK,KAAK,OAAO;oBACtB,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAuB,EAAE,MAAM,CAAC,SAAS,CAAC;oBAClF,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAwB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YACzF,KAAK,MAAM;gBACT,OAAO;QACX,CAAC;IACH,CAAC;IAEO,kBAAkB,CACxB,SAAwC,EACxC,GAAW,EACX,SAAgC,EAChC,KAAiB;QAEjB,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAEzC,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1B,OAAO,IAAA,8BAAiB,EACtB,IAAA,uDAA0B,EAAC,SAAS,EAAE;gBACpC,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;gBACnC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC;gBAC7E,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE,UAAiC,CAAC;gBACzF,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE,UAAiC,CAAC;gBAC5F,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;aACtB,CAAC,EACF,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,OAAO;YACT,CAAC;YAED,OAAO,IAAA,8BAAiB,EACtB,IAAA,uDAA0B,EAAC,SAAS,EAAE;gBACpC,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;gBACnC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC;gBAC7E,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC;gBACnE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC;gBACvE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;aACrF,CAAC,EACF,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAA,oBAAY,EAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACxF,OAAO,IAAA,8BAAiB,EACtB,IAAA,uDAA0B,EAAC,SAAS,EAAE;YACpC,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;YACnC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC;YAC7E,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC;YACpE,OAAO,EAAE,eAAe;YACxB,wEAAwE;YACxE,IAAI,EAAE,eAAe;SACtB,CAAC,EACF,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;IACJ,CAAC;IAEO,gBAAgB,CACtB,SAAwC,EACxC,GAAW,EACX,UAAqB,EACrB,kBAA2B;QAE3B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,UAAU,EAAE,kBAAkB,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/G,IAAI,QAAQ,YAAY,OAAO,EAAE,CAAC;YAChC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC9B,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;QACL,CAAC;QAED,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAEO,iBAAiB,CACvB,SAAwC,EACxC,GAAW,EACX,UAAsB,EACtB,kBAA2B;QAE3B,MAAM,KAAK,GAAG,IAAA,gDAAuB,EAAC,UAAU,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;QACzE,OAAO,IAAA,+BAAkB,EACvB,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAC/D,GAAG,EAAE;YACH,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACrC,CAAC,EACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CAAC;IACJ,CAAC;CACF;AA3LD,4DA2LC"}
|
|
@@ -1,27 +1,12 @@
|
|
|
1
1
|
import { CustomObjectMatchType } from '../types';
|
|
2
2
|
import { MaybeAsync } from '../util/maybeAsync';
|
|
3
|
-
type
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
3
|
+
/** Shape-agnostic match-type handlers; callers map Pass/Deep/Shallow to the right effect. */
|
|
4
|
+
export type CustomObjectMatchHandlers = {
|
|
5
|
+
remove(): MaybeAsync<void>;
|
|
6
|
+
opaque(): MaybeAsync<void>;
|
|
7
|
+
deep(): MaybeAsync<void>;
|
|
8
|
+
shallow(): MaybeAsync<void>;
|
|
9
|
+
pass(): MaybeAsync<void>;
|
|
9
10
|
};
|
|
10
|
-
|
|
11
|
-
deleteKey(): MaybeAsync<void>;
|
|
12
|
-
redactFull(): MaybeAsync<void>;
|
|
13
|
-
redactDeep(): MaybeAsync<void>;
|
|
14
|
-
redactShallowOrPass(): MaybeAsync<void>;
|
|
15
|
-
ignore(): MaybeAsync<void>;
|
|
16
|
-
};
|
|
17
|
-
type CustomObjectPrimitiveHandlers = {
|
|
18
|
-
deleteKey(): MaybeAsync<void>;
|
|
19
|
-
redactFull(): MaybeAsync<void>;
|
|
20
|
-
redactScalar(): MaybeAsync<void>;
|
|
21
|
-
passThrough(): MaybeAsync<void>;
|
|
22
|
-
};
|
|
23
|
-
export declare const applyCustomObjectArrayMatchType: (matchType: CustomObjectMatchType, handlers: CustomObjectArrayHandlers) => MaybeAsync<void>;
|
|
24
|
-
export declare const applyCustomObjectObjectMatchType: (matchType: CustomObjectMatchType, handlers: CustomObjectObjectHandlers) => MaybeAsync<void>;
|
|
25
|
-
export declare const applyCustomObjectPrimitiveMatchType: (matchType: CustomObjectMatchType, handlers: CustomObjectPrimitiveHandlers) => MaybeAsync<void>;
|
|
26
|
-
export {};
|
|
11
|
+
export declare const applyCustomObjectMatchType: (matchType: CustomObjectMatchType, handlers: CustomObjectMatchHandlers) => MaybeAsync<void>;
|
|
27
12
|
//# sourceMappingURL=objectRedactorCustomObject.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"objectRedactorCustomObject.d.ts","sourceRoot":"","sources":["../../src/engine/objectRedactorCustomObject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;
|
|
1
|
+
{"version":3,"file":"objectRedactorCustomObject.d.ts","sourceRoot":"","sources":["../../src/engine/objectRedactorCustomObject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,6FAA6F;AAC7F,MAAM,MAAM,yBAAyB,GAAG;IACtC,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;CAC1B,CAAC;AAEF,eAAO,MAAM,0BAA0B,cAC1B,qBAAqB,YACtB,yBAAyB,KAClC,UAAU,CAAC,IAAI,CAejB,CAAC"}
|
|
@@ -1,54 +1,22 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.
|
|
3
|
+
exports.applyCustomObjectMatchType = void 0;
|
|
4
4
|
const types_1 = require("../types");
|
|
5
|
-
const
|
|
6
|
-
const applyCustomObjectArrayMatchType = (matchType, handlers) => {
|
|
5
|
+
const applyCustomObjectMatchType = (matchType, handlers) => {
|
|
7
6
|
switch (matchType) {
|
|
8
7
|
case types_1.CustomObjectMatchType.Remove:
|
|
9
|
-
return
|
|
8
|
+
return handlers.remove();
|
|
10
9
|
case types_1.CustomObjectMatchType.Opaque:
|
|
11
|
-
return
|
|
10
|
+
return handlers.opaque();
|
|
12
11
|
case types_1.CustomObjectMatchType.Deep:
|
|
13
|
-
return
|
|
12
|
+
return handlers.deep();
|
|
14
13
|
case types_1.CustomObjectMatchType.Shallow:
|
|
15
|
-
return
|
|
14
|
+
return handlers.shallow();
|
|
16
15
|
case types_1.CustomObjectMatchType.Pass:
|
|
17
|
-
return
|
|
16
|
+
return handlers.pass();
|
|
18
17
|
default:
|
|
19
18
|
return undefined;
|
|
20
19
|
}
|
|
21
20
|
};
|
|
22
|
-
exports.
|
|
23
|
-
const applyCustomObjectObjectMatchType = (matchType, handlers) => {
|
|
24
|
-
switch (matchType) {
|
|
25
|
-
case types_1.CustomObjectMatchType.Remove:
|
|
26
|
-
return run(handlers.deleteKey);
|
|
27
|
-
case types_1.CustomObjectMatchType.Opaque:
|
|
28
|
-
return run(handlers.redactFull);
|
|
29
|
-
case types_1.CustomObjectMatchType.Deep:
|
|
30
|
-
return run(handlers.redactDeep);
|
|
31
|
-
case types_1.CustomObjectMatchType.Shallow:
|
|
32
|
-
case types_1.CustomObjectMatchType.Pass:
|
|
33
|
-
return run(handlers.redactShallowOrPass);
|
|
34
|
-
case types_1.CustomObjectMatchType.Ignore:
|
|
35
|
-
return run(handlers.ignore);
|
|
36
|
-
}
|
|
37
|
-
};
|
|
38
|
-
exports.applyCustomObjectObjectMatchType = applyCustomObjectObjectMatchType;
|
|
39
|
-
const applyCustomObjectPrimitiveMatchType = (matchType, handlers) => {
|
|
40
|
-
switch (matchType) {
|
|
41
|
-
case types_1.CustomObjectMatchType.Remove:
|
|
42
|
-
return run(handlers.deleteKey);
|
|
43
|
-
case types_1.CustomObjectMatchType.Opaque:
|
|
44
|
-
return run(handlers.redactFull);
|
|
45
|
-
case types_1.CustomObjectMatchType.Deep:
|
|
46
|
-
case types_1.CustomObjectMatchType.Shallow:
|
|
47
|
-
return run(handlers.redactScalar);
|
|
48
|
-
case types_1.CustomObjectMatchType.Pass:
|
|
49
|
-
default:
|
|
50
|
-
return run(handlers.passThrough);
|
|
51
|
-
}
|
|
52
|
-
};
|
|
53
|
-
exports.applyCustomObjectPrimitiveMatchType = applyCustomObjectPrimitiveMatchType;
|
|
21
|
+
exports.applyCustomObjectMatchType = applyCustomObjectMatchType;
|
|
54
22
|
//# sourceMappingURL=objectRedactorCustomObject.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"objectRedactorCustomObject.js","sourceRoot":"","sources":["../../src/engine/objectRedactorCustomObject.ts"],"names":[],"mappings":";;;AAAA,oCAAiD;
|
|
1
|
+
{"version":3,"file":"objectRedactorCustomObject.js","sourceRoot":"","sources":["../../src/engine/objectRedactorCustomObject.ts"],"names":[],"mappings":";;;AAAA,oCAAiD;AAY1C,MAAM,0BAA0B,GAAG,CACxC,SAAgC,EAChC,QAAmC,EACjB,EAAE;IACpB,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,6BAAqB,CAAC,MAAM;YAC/B,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3B,KAAK,6BAAqB,CAAC,MAAM;YAC/B,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3B,KAAK,6BAAqB,CAAC,IAAI;YAC7B,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzB,KAAK,6BAAqB,CAAC,OAAO;YAChC,OAAO,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC5B,KAAK,6BAAqB,CAAC,IAAI;YAC7B,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC,CAAC;AAlBW,QAAA,0BAA0B,8BAkBrC"}
|
|
@@ -1,9 +1,8 @@
|
|
|
1
|
-
import {
|
|
1
|
+
import { JsonLeafValue, JsonValue, RedactablePrimitive, SecretSpecifierValue } from '../types';
|
|
2
2
|
import { SecretManager } from '../rules/secretManager';
|
|
3
3
|
import { ValuePatternMatcher } from '../rules/valuePatternMatcher';
|
|
4
4
|
export type RedactPrimitiveFn<T> = (value: RedactablePrimitive) => T;
|
|
5
|
-
export
|
|
6
|
-
export
|
|
7
|
-
export declare function getStringSpecifiedCustomObjectSecretKeyValueIfExists(value: JsonObject, customObject: CustomObject, key: string): SecretSpecifierValue | undefined;
|
|
5
|
+
export { getStringValue, toRedactablePrimitive } from '../util/primitiveCoercion';
|
|
6
|
+
export { getStringSpecifiedCustomObjectSecretKeyValueIfExists } from '../rules/schemaSiblingKey';
|
|
8
7
|
export declare function redactPrimitiveValueIfSecret<T>(secretManager: SecretManager, valuePatternMatcher: ValuePatternMatcher, redact: RedactPrimitiveFn<T>, key: SecretSpecifierValue, value: JsonLeafValue | undefined, forceDeepRedaction: boolean): JsonValue | undefined | T;
|
|
9
8
|
//# sourceMappingURL=objectRedactorHelpers.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"objectRedactorHelpers.d.ts","sourceRoot":"","sources":["../../src/engine/objectRedactorHelpers.ts"],"names":[],"mappings":"AAAA,OAAO,
|
|
1
|
+
{"version":3,"file":"objectRedactorHelpers.d.ts","sourceRoot":"","sources":["../../src/engine/objectRedactorHelpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAGnE,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,mBAAmB,KAAK,CAAC,CAAC;AAErE,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,oDAAoD,EAAE,MAAM,2BAA2B,CAAC;AAEjG,wBAAgB,4BAA4B,CAAC,CAAC,EAC5C,aAAa,EAAE,aAAa,EAC5B,mBAAmB,EAAE,mBAAmB,EACxC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAC5B,GAAG,EAAE,oBAAoB,EACzB,KAAK,EAAE,aAAa,GAAG,SAAS,EAChC,kBAAkB,EAAE,OAAO,GAC1B,SAAS,GAAG,SAAS,GAAG,CAAC,CA+B3B"}
|
|
@@ -1,51 +1,25 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.toRedactablePrimitive =
|
|
4
|
-
exports.getStringValue = getStringValue;
|
|
5
|
-
exports.getStringSpecifiedCustomObjectSecretKeyValueIfExists = getStringSpecifiedCustomObjectSecretKeyValueIfExists;
|
|
3
|
+
exports.getStringSpecifiedCustomObjectSecretKeyValueIfExists = exports.toRedactablePrimitive = exports.getStringValue = void 0;
|
|
6
4
|
exports.redactPrimitiveValueIfSecret = redactPrimitiveValueIfSecret;
|
|
7
|
-
const
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
}
|
|
14
|
-
function getStringValue(val) {
|
|
15
|
-
if ((0, types_1.isJsonObject)(val) || Array.isArray(val)) {
|
|
16
|
-
return JSON.stringify(val);
|
|
17
|
-
}
|
|
18
|
-
if (val instanceof Date || typeof val === 'function') {
|
|
19
|
-
return val.toString();
|
|
20
|
-
}
|
|
21
|
-
return val;
|
|
22
|
-
}
|
|
23
|
-
function getStringSpecifiedCustomObjectSecretKeyValueIfExists(value, customObject, key) {
|
|
24
|
-
const siblingKeyName = customObject[key];
|
|
25
|
-
if (typeof siblingKeyName !== 'string') {
|
|
26
|
-
return undefined;
|
|
27
|
-
}
|
|
28
|
-
if (!Object.prototype.hasOwnProperty.call(value, siblingKeyName)) {
|
|
29
|
-
return undefined;
|
|
30
|
-
}
|
|
31
|
-
const siblingValue = value[siblingKeyName];
|
|
32
|
-
if (typeof siblingValue === 'string' || typeof siblingValue === 'number' || typeof siblingValue === 'boolean') {
|
|
33
|
-
return siblingValue;
|
|
34
|
-
}
|
|
35
|
-
return undefined;
|
|
36
|
-
}
|
|
5
|
+
const primitiveCoercion_1 = require("../util/primitiveCoercion");
|
|
6
|
+
var primitiveCoercion_2 = require("../util/primitiveCoercion");
|
|
7
|
+
Object.defineProperty(exports, "getStringValue", { enumerable: true, get: function () { return primitiveCoercion_2.getStringValue; } });
|
|
8
|
+
Object.defineProperty(exports, "toRedactablePrimitive", { enumerable: true, get: function () { return primitiveCoercion_2.toRedactablePrimitive; } });
|
|
9
|
+
var schemaSiblingKey_1 = require("../rules/schemaSiblingKey");
|
|
10
|
+
Object.defineProperty(exports, "getStringSpecifiedCustomObjectSecretKeyValueIfExists", { enumerable: true, get: function () { return schemaSiblingKey_1.getStringSpecifiedCustomObjectSecretKeyValueIfExists; } });
|
|
37
11
|
function redactPrimitiveValueIfSecret(secretManager, valuePatternMatcher, redact, key, value, forceDeepRedaction) {
|
|
38
12
|
if (value instanceof Date || typeof value === 'function') {
|
|
39
|
-
if (secretManager.
|
|
13
|
+
if (secretManager.isOpaqueSecretKey(key) ||
|
|
40
14
|
forceDeepRedaction ||
|
|
41
15
|
secretManager.isSecretKey(key) ||
|
|
42
16
|
secretManager.isDeepSecretKey(key)) {
|
|
43
|
-
return redact(getStringValue(value));
|
|
17
|
+
return redact((0, primitiveCoercion_1.getStringValue)(value));
|
|
44
18
|
}
|
|
45
19
|
return value;
|
|
46
20
|
}
|
|
47
|
-
if (secretManager.
|
|
48
|
-
return redact(getStringValue(value));
|
|
21
|
+
if (secretManager.isOpaqueSecretKey(key)) {
|
|
22
|
+
return redact((0, primitiveCoercion_1.getStringValue)(value));
|
|
49
23
|
}
|
|
50
24
|
if (forceDeepRedaction || secretManager.isSecretKey(key) || secretManager.isDeepSecretKey(key)) {
|
|
51
25
|
if (secretManager.isPassKey(key)) {
|
|
@@ -53,7 +27,7 @@ function redactPrimitiveValueIfSecret(secretManager, valuePatternMatcher, redact
|
|
|
53
27
|
}
|
|
54
28
|
return redact(value);
|
|
55
29
|
}
|
|
56
|
-
if (valuePatternMatcher.findMatching(toRedactablePrimitive(value))) {
|
|
30
|
+
if (valuePatternMatcher.findMatching((0, primitiveCoercion_1.toRedactablePrimitive)(value))) {
|
|
57
31
|
return redact(value);
|
|
58
32
|
}
|
|
59
33
|
return value;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"objectRedactorHelpers.js","sourceRoot":"","sources":["../../src/engine/objectRedactorHelpers.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"objectRedactorHelpers.js","sourceRoot":"","sources":["../../src/engine/objectRedactorHelpers.ts"],"names":[],"mappings":";;;AAUA,oEAsCC;AA7CD,iEAAkF;AAIlF,+DAAkF;AAAzE,mHAAA,cAAc,OAAA;AAAE,0HAAA,qBAAqB,OAAA;AAC9C,8DAAiG;AAAxF,wJAAA,oDAAoD,OAAA;AAE7D,SAAgB,4BAA4B,CAC1C,aAA4B,EAC5B,mBAAwC,EACxC,MAA4B,EAC5B,GAAyB,EACzB,KAAgC,EAChC,kBAA2B;IAE3B,IAAI,KAAK,YAAY,IAAI,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QACzD,IACE,aAAa,CAAC,iBAAiB,CAAC,GAAG,CAAC;YACpC,kBAAkB;YAClB,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC;YAC9B,aAAa,CAAC,eAAe,CAAC,GAAG,CAAC,EAClC,CAAC;YACD,OAAO,MAAM,CAAC,IAAA,kCAAc,EAAC,KAAK,CAAC,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,aAAa,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC,IAAA,kCAAc,EAAC,KAAK,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,kBAAkB,IAAI,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/F,IAAI,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,MAAM,CAAC,KAA4B,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,mBAAmB,CAAC,YAAY,CAAC,IAAA,yCAAqB,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO,MAAM,CAAC,KAA4B,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}
|
|
@@ -7,6 +7,7 @@ import { PathRuleMatcher } from '../rules/pathRuleMatcher';
|
|
|
7
7
|
/**
|
|
8
8
|
* Unified JSON traversal for in-place and copy-on-write redaction.
|
|
9
9
|
* Sync and async paths share one implementation; async mode propagates Promises only when configured.
|
|
10
|
+
* CustomObjects take highest precedence, followed by opaque (`opaqueSecretKeys`), then deep, then shallow.
|
|
10
11
|
*/
|
|
11
12
|
export declare class ObjectRedactorTraversal {
|
|
12
13
|
private readonly primitiveRedactor;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"objectRedactorTraversal.d.ts","sourceRoot":"","sources":["../../src/engine/objectRedactorTraversal.ts"],"names":[],"mappings":"AAAA,OAAO,EAUL,eAAe,EAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAY3D
|
|
1
|
+
{"version":3,"file":"objectRedactorTraversal.d.ts","sourceRoot":"","sources":["../../src/engine/objectRedactorTraversal.ts"],"names":[],"mappings":"AAAA,OAAO,EAUL,eAAe,EAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAY3D;;;;GAIG;AACH,qBAAa,uBAAuB;IAOhC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAE9B,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IATtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA2B;IAC/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoB;gBAG1B,iBAAiB,EAAE,iBAAiB,EACpC,aAAa,EAAE,aAAa,EAC7C,gBAAgB,EAAE,mBAAmB,EACpB,mBAAmB,EAAE,mBAAmB,EACzD,eAAe,EAAE,eAAe;IAiClC,iBAAiB,IAAI,OAAO;IAI5B,aAAa,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC;IASrD,iBAAiB,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC;IASzD,kBAAkB,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAInE,OAAO,KAAK,SAAS,GAEpB;IAED,OAAO,CAAC,cAAc;IAWtB,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,mBAAmB;IAU3B,OAAO,CAAC,oBAAoB;IAS5B,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,YAAY;IAepB,OAAO,CAAC,qBAAqB;IAQ7B,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,qBAAqB;IAkC7B,OAAO,CAAC,gBAAgB;IAkBxB,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,kBAAkB;IAyC1B,OAAO,CAAC,uBAAuB;IA2B/B,OAAO,CAAC,kBAAkB;IA4B1B,OAAO,CAAC,yBAAyB;CAwBlC"}
|
|
@@ -11,6 +11,7 @@ const customObjectFieldHandler_1 = require("./customObjectFieldHandler");
|
|
|
11
11
|
/**
|
|
12
12
|
* Unified JSON traversal for in-place and copy-on-write redaction.
|
|
13
13
|
* Sync and async paths share one implementation; async mode propagates Promises only when configured.
|
|
14
|
+
* CustomObjects take highest precedence, followed by opaque (`opaqueSecretKeys`), then deep, then shallow.
|
|
14
15
|
*/
|
|
15
16
|
class ObjectRedactorTraversal {
|
|
16
17
|
constructor(primitiveRedactor, secretManager, customObjManager, valuePatternMatcher, pathRuleMatcher) {
|
|
@@ -180,7 +181,7 @@ class ObjectRedactorTraversal {
|
|
|
180
181
|
const customObject = this.ruleResolver.getMatchingSchema(value);
|
|
181
182
|
const work = customObject
|
|
182
183
|
? this.handleCustomObject(child, customObject)
|
|
183
|
-
: this.redactSecretFields(child, this.ruleResolver.
|
|
184
|
+
: this.redactSecretFields(child, this.ruleResolver.forceDeepForKey(key, forceDeepRedaction), pathSegments);
|
|
184
185
|
return (0, maybeAsync_1.finalizeMaybeAsync)(work, () => {
|
|
185
186
|
if (parent.copyOnWrite) {
|
|
186
187
|
parent.set(key, child.result());
|