securenow 6.0.2 → 6.1.0

package/docs/EXPRESS-BODY-CAPTURE.md

@@ -55,7 +55,7 @@ Create `.env` or set in PM2 ecosystem file:
 
 ```bash
 SECURENOW_APPID=my-express-api
-SECURENOW_INSTANCE=http://your-signoz-server:4318
+SECURENOW_INSTANCE=http://your-otlp-backend:4318
 SECURENOW_CAPTURE_BODY=1
 SECURENOW_MAX_BODY_SIZE=10240
 ```
@@ -192,6 +192,7 @@ import express from 'express';
 | `SECURENOW_CAPTURE_BODY` | Enable body capture (`1` or `true`) | `0` (disabled) |
 | `SECURENOW_MAX_BODY_SIZE` | Max body size in bytes | `10240` (10KB) |
 | `SECURENOW_SENSITIVE_FIELDS` | Comma-separated additional sensitive fields | (see below) |
+| `SECURENOW_CAPTURE_MULTIPART` | Enable multipart/form-data streaming capture (`1` or `true`) | `0` (disabled) |
 
 ### Default Sensitive Fields
 
@@ -227,7 +228,7 @@ module.exports = {
     env: {
       NODE_ENV: 'production',
       SECURENOW_APPID: 'express-api',
-      SECURENOW_INSTANCE: 'http://signoz:4318',
+      SECURENOW_INSTANCE: 'http://otel-collector:4318',
       SECURENOW_CAPTURE_BODY: '1',
       SECURENOW_NO_UUID: '1',      // Same service.name
       SECURENOW_STRICT: '1',       // Fail if APPID missing
@@ -274,10 +275,10 @@ pm2 logs express-api --lines 100
 | `application/json` | ✅ Yes | ✅ Yes | ✅ Yes |
 | `application/graphql` | ✅ Yes | ✅ Yes | ✅ Yes |
 | `application/x-www-form-urlencoded` | ✅ Yes | ✅ Yes | ✅ Yes |
-| `multipart/form-data` | ❌ No | N/A | N/A |
+| `multipart/form-data` | ✅ Metadata | ✅ Streaming | ✅ Yes |
 | `text/plain` | ❌ No | N/A | N/A |
 
-**Note**: File uploads (`multipart/form-data`) are intentionally NOT captured for performance and privacy reasons.
+**Note**: Multipart capture requires `SECURENOW_CAPTURE_MULTIPART=1` (v5.8.0+). Uses a streaming parser — text field values and file metadata (name, filename, content-type, size) are captured; file binary content is never buffered or stored.
 
 ## 🔍 Example: Complete Express + PM2 Setup
 
@@ -419,7 +420,7 @@ module.exports = {
       NODE_ENV: 'production',
       PORT: 3000,
       SECURENOW_APPID: 'express-api',
-      SECURENOW_INSTANCE: 'http://signoz.company.com:4318',
+      SECURENOW_INSTANCE: 'http://otel-collector.company.com:4318',
       SECURENOW_CAPTURE_BODY: '1',
       SECURENOW_MAX_BODY_SIZE: '10240',
       SECURENOW_NO_UUID: '1',
@@ -451,7 +452,7 @@ module.exports = {
       NODE_ENV: 'production',
       PORT: 3000,
       SECURENOW_APPID: 'express-api',
-      SECURENOW_INSTANCE: 'http://signoz.company.com:4318',
+      SECURENOW_INSTANCE: 'http://otel-collector.company.com:4318',
       SECURENOW_CAPTURE_BODY: '1',
       SECURENOW_MAX_BODY_SIZE: '10240',
       SECURENOW_NO_UUID: '1',
@@ -541,7 +542,7 @@ curl -X POST http://localhost:3000/api/login \
 
 ### Expected Trace Attributes
 
-In your SigNoz dashboard, you should see:
+In your SecureNow dashboard, you should see:
 
 ```json
 {
@@ -612,14 +613,14 @@ app.post('/api/upload', (req, res) => {
 
 - Add custom sensitive fields: `SECURENOW_SENSITIVE_FIELDS`
 - Test with production-like data
-- Review traces in SigNoz
+- Review traces in SecureNow
 
 ### 2. Body Size Limits
 
 **Large bodies can cause:**
 - Memory issues
 - Performance degradation
-- Storage costs in SigNoz
+- Storage costs in SecureNow
 
 **Recommendation:**
 - Keep `SECURENOW_MAX_BODY_SIZE` under 20KB
@@ -861,7 +862,7 @@ module.exports = {
       NODE_ENV: 'production',
       PORT: 3000,
       SECURENOW_APPID: 'express-ts-api',
-      SECURENOW_INSTANCE: 'http://signoz.company.com:4318',
+      SECURENOW_INSTANCE: 'http://otel-collector.company.com:4318',
       SECURENOW_CAPTURE_BODY: '1',
       SECURENOW_MAX_BODY_SIZE: '10240',
       SECURENOW_NO_UUID: '1',
@@ -1001,7 +1002,7 @@ Currently not customizable. Default fields are comprehensive.
 
 SecureNow uses OpenTelemetry standard, so it works with:
 
-- ✅ SigNoz (recommended)
+- ✅ SecureNow (recommended)
 - ✅ Jaeger
 - ✅ Zipkin
 - ✅ Any OTLP-compatible backend
@@ -1019,7 +1020,7 @@ If you encounter issues:
 1. Check [Troubleshooting](#-troubleshooting) section
 2. Enable debug logs: `OTEL_LOG_LEVEL=debug`
 3. Check PM2 logs: `pm2 logs express-api`
-4. Review your SigNoz dashboard for traces
+4. Review your SecureNow dashboard for traces
 
 ---