chore: remove auth data from logs

npm · Jun 30, 2020 · a36abbd · a36abbd
1 parent 09e540b
commit a36abbd
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/check-response.js b/check-response.js
@@ -30,9 +30,18 @@ function logRequest (method, res, startTime, opts) {
   const attempt = res.headers.get('x-fetch-attempts')
   const attemptStr = attempt && attempt > 1 ? ` attempt #${attempt}` : ''
   const cacheStr = res.headers.get('x-local-cache') ? ' (from cache)' : ''
+
+  let urlStr
+  try {
+    const url = new URL(res.url)
+    urlStr = res.url.replace(url.password, '***')
+  } catch {
+    urlStr = res.url
+  }
+
   opts.log.http(
     'fetch',
-    `${method.toUpperCase()} ${res.status} ${res.url} ${elapsedTime}ms${attemptStr}${cacheStr}`
+    `${method.toUpperCase()} ${res.status} ${urlStr} ${elapsedTime}ms${attemptStr}${cacheStr}`
   )
 }