You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Revert obfuscateBody() refactoring from v1.2.3, as it caused preg_replace(): Compilation failed: lookbehind assertion is not fixed length at offset 0 issues.
[Security] Body key obfuscation (obfuscate.body_keys config) is now also applied to form-style request bodies, not only JSON bodies. This prevents accidental logging of e.g. OpenID Connect (OAuth 2.0) tokens on POST /token endpoint, which may contain the refresh_token and client_secret.
[Security] Added id_token as additional body key for obfuscation to the HTTP_CLIENT_GLOBAL_LOGGER_OBFUSCATE_BODY_KEYS default.
Feature | You can now enforce trimming of response body by setting a X-Global-Logger-Trim-Always request header, which will ignore the Content-Type whitelisting.
Feature | Handle Saloon events by @pascalbaljet in #2 – Can now also log Requests/Responses when using Saloon's MockClient by handling SendingSaloonRequest and SentSaloonRequest Saloon events.
Added common OAuth2 keys access_token,refresh_token,client_secret to default body obfuscation configuration.