Function redactAuthQueryParams

apps/hash-api/src/index.ts:251–257

(value: string)

  : undefined;

const redactAuthQueryParams = (value: string): string =>
  value
    /**
     * Fail closed for auth logs by replacing complete query strings.
     * This avoids relying on an allowlist of sensitive key names.
     */
    .replace(/\?[^#\s]*/g, "?[REDACTED_QUERY]");

const sanitizeProxyLogArgs = (args: unknown[]): unknown[] =>
  args.map((arg) =>