Skip to content

Commit 60ee50f

Browse files
committed
redact auth header
1 parent 9899092 commit 60ee50f

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

internals/proxy/middlewares/template.go

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@ import (
88
"net/url"
99
"regexp"
1010
"strconv"
11+
"strings"
1112

1213
jsonutils "github.com/codeshelldev/secured-signal-api/utils/jsonutils"
1314
log "github.com/codeshelldev/secured-signal-api/utils/logger"
@@ -146,6 +147,16 @@ func prefixData(prefix string, data map[string]any) (map[string]any) {
146147
return res
147148
}
148149

150+
func cleanHeaders(headers map[string]any) map[string]any {
151+
authHeader, ok := headers["Authorization"].(string)
152+
153+
if !ok {
154+
authHeader = "REDACTED"
155+
}
156+
157+
headers["Authorization"] = strings.SplitAfterN(authHeader, ` `, 1)[0] + " REDACTED"
158+
}
159+
149160
func TemplateBody(body map[string]any, headers map[string]any, VARIABLES map[string]any) (map[string]any, bool, error) {
150161
var modified bool
151162

0 commit comments

Comments
 (0)