Contents

require 'active_support/concern'
require 'active_support/lazy_load_hooks'

module CryptKeeper
  module LogSubscriber
    module PostgresPgp
      extend ActiveSupport::Concern

      included do
        alias_method_chain :sql, :postgres_pgp
      end

      # Public: Prevents sensitive data from being logged
      def sql_with_postgres_pgp(event)
        filter  = /(\(*)pgp_(sym|pub)_(?<operation>decrypt|encrypt)(\(+.*\)+)/im
        payload = event.payload[:sql]
          .encode('UTF-8', 'binary', invalid: :replace, undef: :replace, replace: '')

        event.payload[:sql] = payload.gsub(filter) do |_|
          "#{$~[:operation]}([FILTERED])"
        end

        sql_without_postgres_pgp(event)
      end
    end
  end
end

ActiveSupport.on_load :crypt_keeper_postgres_pgp_log do
  ActiveRecord::LogSubscriber.send :include, CryptKeeper::LogSubscriber::PostgresPgp
end

Version data entries

6 entries across 6 versions & 1 rubygems

Version	Path
crypt_keeper-0.21.0	lib/crypt_keeper/log_subscriber/postgres_pgp.rb
crypt_keeper-0.20.0	lib/crypt_keeper/log_subscriber/postgres_pgp.rb
crypt_keeper-0.19.0	lib/crypt_keeper/log_subscriber/postgres_pgp.rb
crypt_keeper-0.18.4	lib/crypt_keeper/log_subscriber/postgres_pgp.rb
crypt_keeper-0.18.3	lib/crypt_keeper/log_subscriber/postgres_pgp.rb
crypt_keeper-0.18.2	lib/crypt_keeper/log_subscriber/postgres_pgp.rb