Leahnaya/nxapi
1
0
Fork 0
mirror of https://github.com/samuelthomas2774/nxapi.git synced 2026-03-21 18:04:10 -05:00
Code Issues Actions Packages Projects Releases Wiki Activity

Hide refresh_token/client_secret/naIdToken fields in logs, ignore Cloudflare HTML errors

Browse Source
This commit is contained in:
Samuel Elliott 2025-07-25 19:05:36 +01:00
parent 4452947187
commit 0f0f666ea6
No known key found for this signature in database
GPG Key ID: 8420C7CDE43DC4D6
2 changed files with 12 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/api/util.ts
View File

@ -27,6 +27,15 @@ export class ErrorResponse<T = unknown> extends Error {
Object.defineProperty(this, ErrorResponseSymbol, {enumerable: false, value: ErrorResponseSymbol});
if (response.status === 502 &&
response.headers.get('Server') === 'cloudflare' &&
response.headers.get('Content-Type')?.match(/^text\/html(;|$)/)
) {
// Cloudflare returns it's own HTML error page for HTTP 502 errors
// Logging this isn't helpful so just discard it
body = 'Bad Gateway\n';
}
if (body instanceof ArrayBuffer) {
body = (new TextDecoder()).decode(body);
}

6
src/util/debug.ts
View File

@ -70,10 +70,10 @@ function applyFormatters(args: [formatter: string, ...args: unknown[]], self = d
const censor_fields = [
'token',
// NA OIDC
'access_token', 'id_token',
// OAuth/OIDC
'access_token', 'id_token', 'refresh_token', 'client_secret',
// Coral
'accessToken', 'supportId',
'accessToken', 'supportId', 'naIdToken',
// Moon
'serialNumber', 'notificationToken',
];