lambda-essentials-ts 5.1.4 → 5.1.6

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 
+## [5.1.6] - 2022-11-30
+
+### Changed
+
+Removed logging of client_secret
+
+## [5.1.5] - 2022-11-15
+
+### Changed
+
+The fix described in 5.1.4 missed one instance where the bug can occur. This change covers all known instances.
+
 ## [5.1.4] - 2022-11-08
 
 ### Changed

package/lib/httpClient/httpClient.js

@@ -161,7 +161,9 @@ class HttpClient {
                     error: serializedAxiosError,
                 });
             }
-            const hostname = ((_a = error.config) === null || _a === void 0 ? void 0 : _a.url) ? new url_1.URL(error.config.url).hostname : 'N/A';
+            const hostname = ((_a = error.config) === null || _a === void 0 ? void 0 : _a.url)
+                ? new url_1.URL(error.config.url, error.config.baseURL).hostname
+                : 'N/A';
             throw new clientException_1.ClientException(hostname, serializedAxiosError === null || serializedAxiosError === void 0 ? void 0 : serializedAxiosError.status, serializedAxiosError === null || serializedAxiosError === void 0 ? void 0 : serializedAxiosError.details);
         });
     }

package/lib/logger/logger.js

@@ -74,8 +74,12 @@ class Logger {
         const truncateToken = (innerPayload) => {
             return innerPayload.replace(/(eyJ[a-zA-Z0-9_-]{5,}\.eyJ[a-zA-Z0-9_-]{5,})\.[a-zA-Z0-9_-]*/gi, (m, p1) => `${p1}.<sig>`);
         };
+        const truncateSecret = (data) => {
+            return data.replace(/(\\*"client_secret\\*":\\*")([a-zA-Z0-9_+=.@/-]{60,})(\\*")/gi, (m, p1, p2, p3) => `${p1}<REDACTED>${p3}`);
+        };
         const replacer = (key, value) => ((0, is_error_1.default)(value) ? Logger.errorToObject(value) : value);
         let stringifiedPayload = truncateToken((0, fast_safe_stringify_1.default)(payload, replacer, this.jsonSpace));
+        stringifiedPayload = truncateSecret(stringifiedPayload);
         // https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/cloudwatch_limits_cwl.html 256KB => 32768 characters
         if (stringifiedPayload.length >= 32768) {
             const replacementPayload = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lambda-essentials-ts",
-  "version": "5.1.4",
+  "version": "5.1.6",
   "description": "A selection of the finest modules supporting authorization, API routing, error handling, logging and sending HTTP requests.",
   "main": "lib/index.js",
   "private": false,