Mirrors/uppy
1
0
Fork 0
mirror of https://github.com/transloadit/uppy.git synced 2026-07-25 11:14:05 +00:00
Code Issues Projects Releases Wiki Activity

companion: don't log uppyAuthToken

Browse source
This commit is contained in:
Ifedapo Olarewaju 2019-06-13 14:17:16 +01:00
parent a1c948976f
commit 44fe7f1654
1 changed files with 10 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

13
packages/@uppy/companion/src/standalone/index.js
View file

@ -31,13 +31,20 @@ if (app.get('env') !== 'test') {
// log server requests.
app.use(morgan('combined'))
morgan.token('url', (req, res) => {
// don't log access_tokens in urls
if (req.query && req.query.access_token) {
const mask = (key) => {
// don't log access_tokens in urls
const query = Object.assign({}, req.query)
// replace logged access token with xxxx character
query.access_token = 'x'.repeat(req.query.access_token.length)
query[key] = 'x'.repeat(req.query[key].length)
return `${req.path}?${qs.stringify(query)}`
}
if (req.query && req.query['access_token']) {
return mask('access_token')
} else if (req.query && req.query['uppyAuthToken']) {
return mask('uppyAuthToken')
}
return req.originalUrl || req.url
})