With ktor logging headers (`LogLevel.HEADERS`) app...

# ktor

[Richie Bresnan]

With ktor logging headers (LogLevel.HEADERS) application/customer secrets in the auth header are logged as below. I’d like to redact these secrets, as ******. Has anyone found a non-invasive way of doing this?

[***] 2022-02-22 08:59:45.641 [main] INFO  io.ktor.client.HttpClient - METHOD: HttpMethod(value=GET)
  [***] 2022-02-22 08:59:45.641 [main] INFO  io.ktor.client.HttpClient - COMMON HEADERS
  [***] 2022-02-22 08:59:45.641 [main] INFO  io.ktor.client.HttpClient - -> Accept: application/json
  [***] 2022-02-22 08:59:45.641 [main] INFO  io.ktor.client.HttpClient - -> Accept-Charset: UTF-8
  [***] 2022-02-22 08:59:45.641 [main] INFO  io.ktor.client.HttpClient - -> Authorization: token my_super_secret_token_that_I_want_to_redact

[Matthew Gast]

If you can accurately predict where the secrets would appear, you could intercept the logging calls manually and block out the secrets. It not necessarily clean but it should work.

[Matthew Gast]

Here's an example for a very similar case: https://gitlab.com/jesselcorbett/diskord/-/blob/master/diskord-core/src/commonMain/kotlin/com/jessecorbett/diskord/internal/client/HttpClient.kt

[Richie Bresnan]

Exactly what I was looking for Matthew. And thanks for the example!