From 1c3d501109b8bce976f2aa23e5f9b8e0258d145d Mon Sep 17 00:00:00 2001
From: Andrii Andreiev <129078694+AndriiAndreiev@users.noreply.github.com>
Date: Wed, 18 Sep 2024 17:05:47 +0300
Subject: [PATCH] add masking for php

---
 Makefile                            |  4 ++--
 packages/php/src/HAR/MaskHelper.php | 14 ++++++++++++++
 packages/php/src/HAR/Payload.php    |  8 ++++++--
 3 files changed, 22 insertions(+), 4 deletions(-)
 create mode 100644 packages/php/src/HAR/MaskHelper.php

diff --git a/Makefile b/Makefile
index 11da6ad495..208a6a40bc 100644
--- a/Makefile
+++ b/Makefile
@@ -54,12 +54,12 @@ test-metrics-node-hapi: ## Run Metrics tests against the Node SDK + hapi
 
 test-metrics-php-laravel: ## Run Metrics tests against the PHP SDK + Laravel
 	docker compose up --build --detach integration_php_laravel
-	SUPPORTS_MULTIPART=true npm run test:integration-metrics || make cleanup-failure
+	SUPPORTS_HASHING=true SUPPORTS_MULTIPART=true npm run test:integration-metrics || make cleanup-failure
 	@make cleanup
 
 test-webhooks-php-laravel: ## Run webhooks tests against the PHP SDK + Laravel
 	docker compose up --detach integration_php_laravel
-	SUPPORTS_MULTIPART=true npm run test:integration-webhooks || make cleanup-failure
+	SUPPORTS_HASHING=true SUPPORTS_MULTIPART=true npm run test:integration-webhooks || make cleanup-failure
 	@make cleanup
 
 ##
diff --git a/packages/php/src/HAR/MaskHelper.php b/packages/php/src/HAR/MaskHelper.php
new file mode 100644
index 0000000000..93d3babf85
--- /dev/null
+++ b/packages/php/src/HAR/MaskHelper.php
@@ -0,0 +1,14 @@
+<?php
+
+namespace ReadMe\HAR;
+
+class MaskHelper
+{
+    public static function mask(string $data): string
+    {
+        $hashBytes = hash('sha512', $data, true);
+        $base64Hash = base64_encode($hashBytes);
+        $opts = substr($data, -4);
+        return 'sha512-' . $base64Hash . '?' . $opts;
+    }
+}
diff --git a/packages/php/src/HAR/Payload.php b/packages/php/src/HAR/Payload.php
index 6766cfa444..60347806d5 100644
--- a/packages/php/src/HAR/Payload.php
+++ b/packages/php/src/HAR/Payload.php
@@ -33,7 +33,7 @@ public function create(string $log_id, Request $request, Response $response): ar
         if ($api_key_exists) {
             // Swap the externally documented `api_key` field into backwards compatible and
             // internally used `id` field.
-            $group['id'] = $group['api_key'];
+            $group['id'] = MaskHelper::mask($group['api_key']);
             unset($group['api_key']);
         }
 
@@ -333,10 +333,14 @@ protected static function convertHeaderBagToArray(HeaderBag $headers): array
             /** @psalm-suppress PossiblyNullIterator */
             foreach ($values as $value) {
                 // If the header is empty, don't worry about it.
-                if ($value === '') {
+                if ($value === '' || $value === null) {
                     continue; // @codeCoverageIgnore
                 }
 
+                if (strtolower($name) === 'authorization') {
+                    $value = MaskHelper::mask($value);
+                }
+
                 $output[] = [
                     'name' => $name,
                     'value' => $value