Function scrubSecretsFromText

App/API/AdminHealth.ts:346–373

(text: string)

  /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g;

function scrubSecretsFromText(text: string): string {
  if (!text) {
    return text;
  }

  return redactDdlSecrets(text)
    .replace(
      CONNECTION_STRING_SECRET_PATTERN,
      (_match: string, prefix: string): string => {
        return `${prefix}:***REDACTED***@`;
      },
    )
    .replace(
      AUTH_HEADER_SECRET_PATTERN,
      (
        _match: string,
        name: string,
        separator: string,
        scheme: string,
      ): string => {
        return `${name}${separator}${scheme || ""}***REDACTED***`;
      },
    )
    .replace(BEARER_TOKEN_PATTERN, (_match: string, scheme: string): string => {
      return `${scheme} ***REDACTED***`;
    })
    .replace(JWT_PATTERN, "***REDACTED-JWT***");
}

/*
 * Field names whose VALUE we always drop, regardless of type, when walking a