Mask authorization header

Setono · Jun 24, 2024 · 811bdcd · 811bdcd
1 parent edf5dde
commit 811bdcd
Showing 1 changed file with 16 additions and 2 deletions.
diff --git a/src/Message/CommandHandler/ProcessUploadOrderRequestHandler.php b/src/Message/CommandHandler/ProcessUploadOrderRequestHandler.php
@@ -91,9 +91,23 @@ private static function stringifyMessage(RequestInterface|ResponseInterface|null
             );
         }
 
-        // todo mask authorization header
+        /**
+         * @var string $name
+         * @var list<string> $values
+         */
         foreach ($message->getHeaders() as $name => $values) {
-            $result .= sprintf("%s: %s\n", $name, implode(', ', $values));
+            $value = implode(', ', $values);
+
+            if ('authorization' === strtolower($name) && strlen($value) > 8) {
+                $value = substr_replace(
+                    $value,
+                    str_repeat('*', strlen($value) - 8),
+                    4,
+                    -4,
+                );
+            }
+
+            $result .= sprintf("%s: %s\n", $name, $value);
         }
 
         $body = trim((string) $message->getBody());