watchdock-errors 0.4.0__tar.gz → 0.5.0__tar.gz

{watchdock_errors-0.4.0/src/watchdock_errors.egg-info → watchdock_errors-0.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: watchdock-errors
-Version: 0.4.0
+Version: 0.5.0
 Summary: Application error tracking SDK for the Watchdock platform
 License: MIT
 Keywords: error-tracking,observability,watchdock
@@ -138,7 +138,7 @@ When `init()` is called, the SDK sends a one-time, fire-and-forget ping to the p
 
 ## PII scrubbing
 
-By default, `Authorization`, `Cookie`, and `X-Api-Key` headers are stripped and the request body is not sent. Set `send_pii=True` to disable scrubbing.
+By default, `Authorization`, `Cookie`, `Set-Cookie`, and `X-Api-Key` headers are stripped, the request body is not sent, and sensitive-looking query-param values (names containing `token`, `secret`, `password`, `auth`, `key`, `session`, `credential`, `otp`, `pin`, `ssn`, etc.) are redacted in both `query_params` and the captured `url` itself. Set `send_pii=True` to disable scrubbing.
 
 Use the `before_send` hook for custom scrubbing:
 

{watchdock_errors-0.4.0 → watchdock_errors-0.5.0}/README.md

@@ -116,7 +116,7 @@ When `init()` is called, the SDK sends a one-time, fire-and-forget ping to the p
 
 ## PII scrubbing
 
-By default, `Authorization`, `Cookie`, and `X-Api-Key` headers are stripped and the request body is not sent. Set `send_pii=True` to disable scrubbing.
+By default, `Authorization`, `Cookie`, `Set-Cookie`, and `X-Api-Key` headers are stripped, the request body is not sent, and sensitive-looking query-param values (names containing `token`, `secret`, `password`, `auth`, `key`, `session`, `credential`, `otp`, `pin`, `ssn`, etc.) are redacted in both `query_params` and the captured `url` itself. Set `send_pii=True` to disable scrubbing.
 
 Use the `before_send` hook for custom scrubbing:
 

{watchdock_errors-0.4.0 → watchdock_errors-0.5.0}/src/watchdock_errors/event.py

@@ -4,10 +4,17 @@ import datetime
 import logging
 
 from .config import SDKConfig
-from .utils import extract_stacktrace, extract_trace_id, get_server_info
+from .utils import extract_stacktrace, extract_trace_id, get_server_info, sanitize_url_and_query_params
 
 logger = logging.getLogger("watchdock_errors")
 
+#: Lowercased for comparison -- header casing isn't consistent across integrations (e.g.
+#: Django's request.headers is Title-Case, but raw ASGI scope headers used by the FastAPI
+#: integration are always lowercase per spec), so matching by exact Title-Case key silently
+#: let Authorization/Cookie/X-Api-Key through unscrubbed for any integration that doesn't
+#: happen to produce Django's casing.
+_SENSITIVE_HEADER_NAMES = {"authorization", "cookie", "set-cookie", "x-api-key"}
+
 
 def build_event(
     exc: BaseException | None,
@@ -75,10 +82,19 @@ def build_event(
         else:
             req = dict(request_context.get("request", {}))
             req.pop("body", None)
-            headers = dict(req.get("headers", {}))
-            for sensitive in ("Authorization", "Cookie", "X-Api-Key"):
-                headers.pop(sensitive, None)
-            req["headers"] = headers
+            req["headers"] = {
+                key: value
+                for key, value in req.get("headers", {}).items()
+                if key.lower() not in _SENSITIVE_HEADER_NAMES
+            }
+            if "url" in req or "query_params" in req:
+                sanitized_url, sanitized_params = sanitize_url_and_query_params(
+                    req.get("url", ""), req.get("query_params")
+                )
+                if "url" in req:
+                    req["url"] = sanitized_url
+                if "query_params" in req:
+                    req["query_params"] = sanitized_params
             event["request"] = req
 
     if config.before_send is not None:

{watchdock_errors-0.4.0 → watchdock_errors-0.5.0}/src/watchdock_errors/integrations/fastapi.py

@@ -10,6 +10,7 @@ Usage:
 from __future__ import annotations
 
 from typing import TYPE_CHECKING
+from urllib.parse import parse_qs
 
 import watchdock_errors
 
@@ -37,15 +38,22 @@ class WatchdockASGIMiddleware:
 
 
 def _build_request_context(scope: dict) -> dict:
+    # ASGI header names are always lowercase bytes per spec (unlike Django's Title-Case
+    # request.headers) -- header scrubbing is case-insensitive, so this doesn't need to
+    # match Django's casing, just be a dict of decoded strings.
     headers = {k.decode(): v.decode() for k, v in scope.get("headers", [])}
     query_string = scope.get("query_string", b"").decode()
+    # dict, not the raw query string -- matches the shape every other integration produces
+    # (and what sanitize_url_and_query_params/the frontend expect). Single-value params
+    # come through as a plain string rather than a 1-item list, matching Django's shape.
+    query_params = {key: values[0] if len(values) == 1 else values for key, values in parse_qs(query_string).items()}
 
     return {
         "request": {
             "method": scope.get("method", ""),
             "url": _build_url(scope),
             "headers": headers,
-            "query_params": query_string,
+            "query_params": query_params,
         }
     }
 

{watchdock_errors-0.4.0 → watchdock_errors-0.5.0}/src/watchdock_errors/utils.py

@@ -65,6 +65,61 @@ def get_server_info() -> dict:
     }
 
 
+#: Substring match (case-insensitive) against query-param names. Deliberately broad —
+#: over-redacting an innocuous param (e.g. "sort_key") is a much smaller cost than
+#: leaking a reset token, session id, or api key sitting in a URL.
+_SENSITIVE_QUERY_PARAM_SUBSTRINGS = (
+    "token",
+    "secret",
+    "password",
+    "passwd",
+    "pwd",
+    "auth",
+    "key",
+    "session",
+    "credential",
+    "otp",
+    "pin",
+    "ssn",
+)
+
+
+def _is_sensitive_param(name: str) -> bool:
+    lowered = name.lower()
+    return any(substring in lowered for substring in _SENSITIVE_QUERY_PARAM_SUBSTRINGS)
+
+
+def sanitize_url_and_query_params(url: str, query_params: dict | None) -> tuple[str, dict]:
+    """Redact sensitive query-param values from both ``query_params`` and ``url`` itself.
+
+    Headers and the request body get their own scrubbing, but a URL is often the most
+    PII-dense thing captured by default -- password-reset tokens, magic-link codes,
+    ``?api_key=...``, session ids -- and previously passed through untouched even with
+    PII collection off. Rebuilds the url's query string from the redacted params rather
+    than just deleting it, so the two never disagree and the path (still useful for
+    grouping/debugging) is preserved.
+    """
+    from urllib.parse import urlencode, urlsplit, urlunsplit
+
+    sanitized_params: dict = {}
+    for key, value in (query_params or {}).items():
+        if _is_sensitive_param(key):
+            sanitized_params[key] = ["[REDACTED]"] * len(value) if isinstance(value, list) else "[REDACTED]"
+        else:
+            sanitized_params[key] = value
+
+    if not url:
+        return url, sanitized_params
+
+    parts = urlsplit(url)
+    if parts.query:
+        # doseq=True so list-valued params (e.g. Django QueryDict-style) re-encode correctly.
+        new_query = urlencode(sanitized_params, doseq=True)
+        url = urlunsplit((parts.scheme, parts.netloc, parts.path, new_query, parts.fragment))
+
+    return url, sanitized_params
+
+
 def extract_trace_id(headers: dict | None) -> str | None:
     """
     Pull a correlation ID off incoming request headers so this event can be

{watchdock_errors-0.4.0 → watchdock_errors-0.5.0/src/watchdock_errors.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: watchdock-errors
-Version: 0.4.0
+Version: 0.5.0
 Summary: Application error tracking SDK for the Watchdock platform
 License: MIT
 Keywords: error-tracking,observability,watchdock
@@ -138,7 +138,7 @@ When `init()` is called, the SDK sends a one-time, fire-and-forget ping to the p
 
 ## PII scrubbing
 
-By default, `Authorization`, `Cookie`, and `X-Api-Key` headers are stripped and the request body is not sent. Set `send_pii=True` to disable scrubbing.
+By default, `Authorization`, `Cookie`, `Set-Cookie`, and `X-Api-Key` headers are stripped, the request body is not sent, and sensitive-looking query-param values (names containing `token`, `secret`, `password`, `auth`, `key`, `session`, `credential`, `otp`, `pin`, `ssn`, etc.) are redacted in both `query_params` and the captured `url` itself. Set `send_pii=True` to disable scrubbing.
 
 Use the `before_send` hook for custom scrubbing:
 

watchdock_errors-0.5.0/src/watchdock_errors.egg-info/scm_version.json

@@ -0,0 +1,8 @@
+{
+  "tag": "0.5.0",
+  "distance": 0,
+  "node": "gb60ccd75b33be3b29188767aa21e15ab18047fb6",
+  "dirty": false,
+  "branch": "HEAD",
+  "node_date": "2026-08-27"
+}

watchdock_errors-0.4.0/src/watchdock_errors.egg-info/scm_version.json

@@ -1,8 +0,0 @@
-{
-  "tag": "0.4.0",
-  "distance": 0,
-  "node": "gcbc7ed27dbd4e8399c6f64c46a993f99ab8f34ce",
-  "dirty": false,
-  "branch": "HEAD",
-  "node_date": "2026-08-13"
-}