Removing logs with auth tokens

[jdziat]

Features and Changes

Updating logging redacted paths to include the cookies being sent in the response.

Example log message with authentication information included:

{
  "level": 30,
  "time": 1712058434895,
  "pid": 58,
    "req": {
    "id": 3556,
    "method": "POST",
    "url": "/auth/refresh",
    "query": {
    },
    "params": {
    },
    "headers": {

    }
  },
  "res": {
    "statusCode": 200,
    "headers": {
      "vary": "Origin, Accept-Encoding",
      "set-cookie": [
        "AUTH_ID_TOKEN=<<redacted>>; Max-Age=1; Path=/; Expires=Tue, 02 Apr 2024 11:47:16 GMT; HttpOnly",
        "AUTH_REFRESH_TOKEN=<<redacted>>; Max-Age=2592000; Path=/; Expires=Thu, 02 May 2024 11:47:14 GMT; HttpOnly"
      ],
      "content-type": "application/json; charset=utf-8",
      "content-length": "424"
    }
  },
  "responseTime": 17,
  "msg": "request completed"
}

Dependencies

Testing

Screenshots