Merge pull request #1468 from senid231/customer-v1-hide-cdr-attrs

Customer API cdrs - hide configured attributes/relationships

app/resources/api/rest/customer/v1/cdr_resource.rb

@@ -102,6 +102,12 @@ def rec
     _model.has_recording?
   end
 
+  def fetchable_fields
+    fields = super
+    hidden_fields = YetiConfig.customer_api_cdr_hide_fields || []
+    fields - hidden_fields.map(&:to_sym)
+  end
+
   def self.apply_allowed_accounts(records, options)
     context = options[:context]
     scope = records.where_customer(context[:customer_id])

config/initializers/_config.rb

@@ -83,6 +83,8 @@ def self.setting_files(config_root, _env)
       optional(:url_callback).maybe(:string)
       optional(:url_return).maybe(:string)
     end
+
+    optional(:customer_api_cdr_hide_fields).array(:string)
   end
 end
 

spec/requests/api/rest/customer/v1/cdrs_controller_spec.rb

@@ -397,6 +397,22 @@
       )
     end
 
+    context 'when customer_api_cdr_hide_fields configured' do
+      before do
+        allow(YetiConfig).to receive(:customer_api_cdr_hide_fields).and_return(
+          %w[auth_orig_ip lega_user_agent]
+        )
+      end
+
+      it 'returns record with expected attributes' do
+        subject
+        attribute_keys = response_json[:data][:attributes].keys
+        expect(attribute_keys).to include(:'auth-orig-port')
+        expect(attribute_keys).not_to include(:'auth-orig-ip')
+        expect(attribute_keys).not_to include(:'lega-user-agent')
+      end
+    end
+
     context 'with include auth-orig-transport-protocol' do
       let(:json_api_request_query) { { include: 'auth-orig-transport-protocol' } }