golem15/summercms
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: capture exploration — apparatus dissolved into framework

Browse Source
This commit is contained in:
Jakub Zych
2026-09-28 00:39:43 +02:00
parent 7ac75b918d
commit df45520dd8
4 changed files with 80 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
.planning/todos/pending/redacting-slog-handler.md Normal file
View File

@@ -0,0 +1,12 @@
---
title: Framework slog handler that redacts credentials (port RedactCredentialsTap)
date: 2026-09-28
priority: medium
area: summercms.go logging
---
Port `Golem15\Apparatus\Classes\Logging\RedactCredentialsTap` as a framework `slog.Handler` wrapper: redact attribute keys `api_key`, `apikey`, `authorization`, `bearer`, `password`, `secret`, `token`, `webhook_secret`, `admin_password` (case-insensitive, nested groups), and scrub its message regex patterns.
Also verify whether `surf`'s error path already gives `SafeExceptionResponse` behaviour (generic "Internal server error" outside debug, real message logged); add a small helper only if it does not.
See `.planning/notes/apparatus-dissolved-into-framework.md`.