forked from waja/action-debian-package
105 lines
3 KiB
JavaScript
105 lines
3 KiB
JavaScript
|
'use strict'
|
|||
|
|
|
|||
|
|
const fastRedact = require('fast-redact')
|
|||
|
|
const { redactFmtSym, wildcardFirstSym } = require('./symbols')
|
|||
|
|
const { rx, validator } = fastRedact
|
|||
|
|
|
|||
|
|
const validate = validator({
|
|||
|
|
ERR_PATHS_MUST_BE_STRINGS: () => 'pino – redacted paths must be strings',
|
|||
|
|
ERR_INVALID_PATH: (s) => `pino – redact paths array contains an invalid path (${s})`
|
|||
|
|
})
|
|||
|
|
|
|||
|
|
const CENSOR = '[Redacted]'
|
|||
|
|
const strict = false // TODO should this be configurable?
|
|||
|
|
|
|||
|
|
function redaction (opts, serialize) {
|
|||
|
|
const { paths, censor } = handle(opts)
|
|||
|
|
|
|||
|
|
const shape = paths.reduce((o, str) => {
|
|||
|
|
rx.lastIndex = 0
|
|||
|
|
const first = rx.exec(str)
|
|||
|
|
const next = rx.exec(str)
|
|||
|
|
|
|||
|
|
// ns is the top-level path segment, brackets + quoting removed.
|
|||
|
|
let ns = first[1] !== undefined
|
|||
|
|
? first[1].replace(/^(?:"|'|`)(.*)(?:"|'|`)$/, '$1')
|
|||
|
|
: first[0]
|
|||
|
|
|
|||
|
|
if (ns === '*') {
|
|||
|
|
ns = wildcardFirstSym
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// top level key:
|
|||
|
|
if (next === null) {
|
|||
|
|
o[ns] = null
|
|||
|
|
return o
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// path with at least two segments:
|
|||
|
|
// if ns is already redacted at the top level, ignore lower level redactions
|
|||
|
|
if (o[ns] === null) {
|
|||
|
|
return o
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
const { index } = next
|
|||
|
|
const nextPath = `${str.substr(index, str.length - 1)}`
|
|||
|
|
|
|||
|
|
o[ns] = o[ns] || []
|
|||
|
|
|
|||
|
|
// shape is a mix of paths beginning with literal values and wildcard
|
|||
|
|
// paths [ "a.b.c", "*.b.z" ] should reduce to a shape of
|
|||
|
|
// { "a": [ "b.c", "b.z" ], *: [ "b.z" ] }
|
|||
|
|
// note: "b.z" is in both "a" and * arrays because "a" matches the wildcard.
|
|||
|
|
// (* entry has wildcardFirstSym as key)
|
|||
|
|
if (ns !== wildcardFirstSym && o[ns].length === 0) {
|
|||
|
|
// first time ns's get all '*' redactions so far
|
|||
|
|
o[ns].push(...(o[wildcardFirstSym] || []))
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (ns === wildcardFirstSym) {
|
|||
|
|
// new * path gets added to all previously registered literal ns's.
|
|||
|
|
Object.keys(o).forEach(function (k) {
|
|||
|
|
if (o[k]) {
|
|||
|
|
o[k].push(nextPath)
|
|||
|
|
}
|
|||
|
|
})
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
o[ns].push(nextPath)
|
|||
|
|
return o
|
|||
|
|
}, {})
|
|||
|
|
|
|||
|
|
// the redactor assigned to the format symbol key
|
|||
|
|
// provides top level redaction for instances where
|
|||
|
|
// an object is interpolated into the msg string
|
|||
|
|
const result = {
|
|||
|
|
[redactFmtSym]: fastRedact({ paths, censor, serialize, strict })
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
const topCensor = (...args) =>
|
|||
|
|
typeof censor === 'function' ? serialize(censor(...args)) : serialize(censor)
|
|||
|
|
|
|||
|
|
return [...Object.keys(shape), ...Object.getOwnPropertySymbols(shape)].reduce((o, k) => {
|
|||
|
|
// top level key:
|
|||
|
|
if (shape[k] === null) o[k] = topCensor
|
|||
|
|
else o[k] = fastRedact({ paths: shape[k], censor, serialize, strict })
|
|||
|
|
return o
|
|||
|
|
}, result)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
function handle (opts) {
|
|||
|
|
if (Array.isArray(opts)) {
|
|||
|
|
opts = { paths: opts, censor: CENSOR }
|
|||
|
|
validate(opts)
|
|||
|
|
return opts
|
|||
|
|
}
|
|||
|
|
var { paths, censor = CENSOR, remove } = opts
|
|||
|
|
if (Array.isArray(paths) === false) { throw Error('pino – redact must contain an array of strings') }
|
|||
|
|
if (remove === true) censor = undefined
|
|||
|
|
validate({ paths, censor })
|
|||
|
|
|
|||
|
|
return { paths, censor }
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
module.exports = redaction
|