Gravitee : Policy Data Loggin Masking

[exalate-issue-sync]

Describe the bug :

Client is trying to use Data Logging Masking policy to hide card number of client on response. They want the sensitive data to be hidden on the logs, and on gateway logs it seems to work, but on consumer part data is still visible.

To Reproduce :

Steps to reproduce the behaviour:

1. Create a dummy API
2. Go to design and on response set data logging masking policy
3. I used https://api.gravitee.io/whoami endpoint
4. I masked name value and arch value in os like this: $.os.name and $.os.arch

Expected behaviour :

Expected behaviour is that the sensitive data needs to be hidden on both consumer and gateway logs.

Useful information :

Attachment - image.png

Desktop :

• Environment: [APIM-4.0.3]

_{* Please see Zendesk Support tab for further comments and attachments.}

[exalate-issue-sync]

This issue has been fixed in versions 4.0.11, 4.1.2