Obfuscate Nonce and Authorization token

agustinbusso · agustinbusso · commit bc3078462989 · 2022-10-12T17:10:53.000-03:00
diff --git a/ProcessMaker/WebServices/NativeSoapClient.php b/ProcessMaker/WebServices/NativeSoapClient.php
@@ -92,10 +92,24 @@ private function logSoap($label, $log)
             if ($credentials->length) {
                 $doc->getElementsByTagName('Username')->item(0)->nodeValue = '************';
                 $doc->getElementsByTagName('Password')->item(0)->nodeValue = '************';
+
+                if ($doc->getElementsByTagName('Nonce')->item(0) && $doc->getElementsByTagName('Nonce')->item(0)->nodeValue) {
+                    $doc->getElementsByTagName('Nonce')->item(0)->nodeValue = '************';
+                }
             }
 
             Log::channel('data-source')->info($label . $doc->saveXML());
         } catch (\Throwable $th) {
+            if ($label === 'Request Headers: ') {
+                $newLog = '';
+                foreach (preg_split("/((\r?\n)|(\r\n?))/", $log) as $line) {
+                    if (str_contains($line, 'Authorization:')) {
+                        $line = 'Authorization: ************';
+                    }
+                    $newLog .= $line . PHP_EOL;
+                }
+                $log = $newLog;
+            }
             Log::channel('data-source')->info($label . $log);
         }
     }
