feat(logger): redact sensitive fields in log output #16
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "feat/logging-redaction"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Configure Pino's redact option to mask cookie/authorization request
headers and common credential field names (password, password_hash,
api_key, apiKey). Drop the Jellyfin response-headers trace log, which
could leak set-cookie tokens — url and status are sufficient.
668171e19ed93bf5f170