25 lines
771 B
Python
25 lines
771 B
Python
|
"""PSK redaction for safe logging.
|
||
|
|
|
||
|
|
Walks any nested dict/list structure and blanks out the value of any dict
|
||
|
|
key literally named "psk" (Neutron's and Sprut's shared field name) when
|
||
|
|
that value is not null. Used only for logging -- the real value is always
|
||
|
|
used wherever the original object is read for actual API calls/storage.
|
||
|
|
"""
|
||
|
|
from __future__ import annotations
|
||
|
|
|
||
|
|
from typing import Any
|
||
|
|
|
||
|
|
_PSK_KEYS = {"psk"}
|
||
|
|
_REDACTED = "***REDACTED***"
|
||
|
|
|
||
|
|
|
||
|
|
def redact_psk(value: Any) -> Any:
|
||
|
|
if isinstance(value, dict):
|
||
|
|
return {
|
||
|
|
key: (_REDACTED if key in _PSK_KEYS and val is not None else redact_psk(val))
|
||
|
|
for key, val in value.items()
|
||
|
|
}
|
||
|
|
if isinstance(value, list):
|
||
|
|
return [redact_psk(item) for item in value]
|
||
|
|
return value
|