Log HTTP body, not headers

[leaqui]

It could be useful to allow logging of HTTP body but not headers.

In some cases, headers contains restricted / confidential information such as usernames, passwords, tokens, so you don't want to write them to logs. Whilst HTTP body could contribute useful information.

Actually feign.Logger doesn't have a feign.Logger.Level allowing to configure logging of HTTP body but not headers.

To do that you could create feign.Logger subclass, and rewrite logRequest and logAndRebufferResponse methods.

[vitalijr2]

Hi!

Try to use

feign/core/src/main/java/feign/Logger.java

Line 52 in 1c5c6e1

protected boolean shouldLogRequestHeader(String header) {

and

feign/core/src/main/java/feign/Logger.java

Line 62 in 1c5c6e1

protected boolean shouldLogResponseHeader(String header) {

to hide sensitive data.

[leaqui]

Thanks @radio-rogal for reply.

Yes, this alternative is useful for not logging some headers (or all of them), but it loops through all headers and you must create a feign.Logger subclass to specify this.

It would be great to have a feign.Logger.Level to log body but not headers.