mirror of
https://github.com/gesellix/Bose-SoundTouch.git
synced 2026-08-19 00:56:16 +00:00
Tobias GesellchenandClaude Opus 4.7
339dc80bf1
The previous commit made credential-header redaction unconditional in proxy log output, which is the right safety floor for production but inconvenient for local debugging when a developer wants to inspect Authorization / Cookie / X-Bose-Token values flowing through the service. Add an explicit "I-know-what-I-am-doing" toggle: * New LoggingProxy.UnsafeLogCredentialHeaders bool field. * Default off — the redaction floor stays in place. * Reads the LOG_PROXY_CREDENTIALS env var so a developer can flip it on without recompiling, mirroring the existing LOG_PROXY_BODY pattern. * When true, formatHeaders skips both the always-sensitive floor and the broader Redact policy, so log lines contain raw header values. CodeQL's go/clear-text-logging rule continues to be satisfied because the default code path still redacts; only an explicit opt-in via configuration produces unredacted output, mirroring how AllowInsecureUpstreamTLS works. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>