Function checkRequestBody

audit/interceptor.go:324–348

(reqType string, path string, body string)

}

func checkRequestBody(reqType string, path string, body string) string {
	switch reqType {
	case Grpc:
		if skipReqBodyGrpc[path] {
			regex, err := regexp.Compile(
				`password[\s]?(.*?)[\s]?:[\s]?(.*?)[\s]?"[\s]?(.*?)[\s]?"`)
			if err != nil {
				return body
			}
			body = regex.ReplaceAllString(body, "*******")
		}
	case Http:
		if path == "/admin" {
			return maskPasswordFieldsInGQL(body)
		} else if path == "/grapqhl" {
			regex, err := regexp.Compile(
				`check[\s]?(.*?)[\s]?Password[\s]?(.*?)[\s]?:[\s]?(.*?)[\s]?"[\s]?(.*?)[\s]?"`)
			if err != nil {
				return body
			}
			body = regex.ReplaceAllString(body, "*******")
		}
	}
	return body
}

func getRequestBody(r *http.Request) []byte {
	var in io.Reader = r.Body