snapshot of https://github.com/centrifugal/centrifugo.git (master, 2026-09-16; blobs > 131072B omitted)

internal/tools/logging.go

@@ -0,0 +1,59 @@
+package tools
+
+import (
+	"net/url"
+	"strings"
+)
+
+// StripPassword from URL address.
+func StripPassword(address string) string {
+	u, err := url.Parse(address)
+	if err != nil {
+		return address
+	}
+	// Use url.Redacted, which replaces the password in the parsed userinfo before
+	// re-encoding. The previous approach string-replaced the DECODED password in
+	// the ENCODED URL, so a password containing a URL-special char (e.g. "@", a
+	// space, or non-ASCII) never matched and was logged in the clear.
+	return u.Redacted()
+}
+
+// GetLogAddresses returns a string with addresses (concatenated with comma)
+// with password stripped from each address.
+func GetLogAddresses(addresses []string) string {
+	cleanedAddresses := make([]string, 0, len(addresses))
+	for _, a := range addresses {
+		cleanedAddress := StripPassword(a)
+		cleanedAddresses = append(cleanedAddresses, cleanedAddress)
+	}
+	return strings.Join(cleanedAddresses, ", ")
+}
+
+// RedactedLogURLs prepares URLs to be logged or shown in UI stripping auth info from them.
+func RedactedLogURLs(urls ...string) []string {
+	var result []string
+
+	for _, input := range urls {
+		// Split the input by commas to handle comma-separated URLs.
+		urlParts := strings.Split(input, ",")
+		var cleanedParts []string
+
+		for _, urlString := range urlParts {
+			parsedURL, err := url.Parse(strings.TrimSpace(urlString))
+			var cleanedURL string
+			if err != nil {
+				cleanedURL = "<invalid_url>"
+			} else {
+				cleanedURL = parsedURL.Redacted()
+			}
+			cleanedParts = append(cleanedParts, cleanedURL)
+		}
+
+		// Combine the cleaned URLs back into a comma-separated string.
+		if len(cleanedParts) > 0 {
+			result = append(result, strings.Join(cleanedParts, ","))
+		}
+	}
+
+	return result
+}