fix: logs

apps/server/src/common/helpers/utils.ts

@@ -142,6 +142,18 @@ export function isUserDisabled(user: {
   return !!(user.deactivatedAt || user.deletedAt);
 }
 
+const SENSITIVE_URL_PREFIXES = ['/api/sso/'];
+
+export function redactSensitiveUrl(url: string): string {
+  if (url && SENSITIVE_URL_PREFIXES.some((prefix) => url.includes(prefix))) {
+    const qsIndex = url.indexOf('?');
+    if (qsIndex !== -1) {
+      return url.substring(0, qsIndex);
+    }
+  }
+  return url;
+}
+
 export function createByteCountingStream(source: Readable) {
   let bytesRead = 0;
   const stream = new Transform({

apps/server/src/common/logger/pino.config.ts

@@ -1,5 +1,6 @@
 import { Params } from 'nestjs-pino';
 import { stdTimeFunctions } from 'pino';
+import { redactSensitiveUrl } from '../helpers/utils';
 
 const CONTEXTS_TO_IGNORE = [
   'InstanceLoader',
@@ -52,7 +53,7 @@ export function createPinoConfig(): Params {
       serializers: {
         req: (req) => ({
           method: req.method,
-          url: req.url,
+          url: redactSensitiveUrl(req.url),
           ip: req.ip || req.remoteAddress,
           userAgent: req.headers?.['user-agent'],
         }),