Function maskJSONField

backend/api/v1/document_masking.go:291–296

maskJSONField masks a single field value based on its source field paths or direct schema lookup.

(key string, value any, fieldPaths map[string][]*parserbase.PathAST, objectSchema *storepb.ObjectSchema, semanticTypeToMasker map[string]masker.Masker)

// maskJSONField masks a single field value based on its source field paths or direct schema lookup.
func maskJSONField(key string, value any, fieldPaths map[string][]*parserbase.PathAST, objectSchema *storepb.ObjectSchema, semanticTypeToMasker map[string]masker.Masker) (any, error) {
	if paths, ok := fieldPaths[key]; ok && len(paths) > 0 {
		return maskFieldBySourcePaths(value, paths, objectSchema, semanticTypeToMasker)
	}
	return maskFieldByDirectLookup(key, value, objectSchema, semanticTypeToMasker)
}

// maskFieldBySourcePaths checks all source paths for sensitivity, then falls back to recursive walk.
func maskFieldBySourcePaths(value any, paths []*parserbase.PathAST, objectSchema *storepb.ObjectSchema, semanticTypeToMasker map[string]masker.Masker) (any, error) {