Repository navigation

Stop logging the API key, and apply the log level and label settings - #137

Open

zeevmoney wants to merge 39 commits into

per-16676/release-ci-hardeningfrom

per-16680/stop-logging-api-key

Open

Stop logging the API key, and apply the log level and label settings#137
zeevmoney wants to merge 39 commits into
per-16676/release-ci-hardeningfrom
per-16680/stop-logging-api-key

Commits on Oct 1, 2026
- Stop logging the API key when a client is created
  
  zeevmoney
  and
  claude
  committed
  2a6bd7b
- Redact the API key from every record the SDK logs
  
  zeevmoney
  and
  claude
  committed
  39f175f
- Apply the log level and label to the SDK's records
  
  zeevmoney
  and
  claude
  committed
  074cf96
- Document what each log option does
  
  zeevmoney
  and
  claude
  committed
  9965fed
- Test that the SDK never logs its API key and applies log settings
  
  zeevmoney
  and
  claude
  committed
  457ca08
- Merge per-16680/impl-logging
  
  zeevmoney
  and
  claude
  committed
  7fdac5b
- Accept a lower-case log level the application added to loguru
  
  zeevmoney
  and
  claude
  committed
  eaf1722
- Say in the README what the log level hides and when it raises
  
  zeevmoney
  and
  claude
  committed
  0a0cbbc
- Hide the API key from PermitConfig's repr
  
  zeevmoney
  and
  claude
  committed
  ef40ecd
- Redact the longest registered API key first
  
  zeevmoney
  and
  claude
  committed
  1bb2a32
- Also redact the API key without surrounding whitespace
  
  zeevmoney
  and
  claude
  committed
  e9100d2
- Redact the API key from PDP error bodies the SDK raises
  
  zeevmoney
  and
  claude
  committed
  9d02291
- Undo only the SDK's own logger.disable when logging is enabled
  
  zeevmoney
  and
  claude
  committed
  99ca527
- Keep the process's log settings when wait_for_sync is used
  
  zeevmoney
  and
  claude
  committed
  abd47f2
- Show the JSON log recipe in place of loguru's default sink
  
  zeevmoney
  and
  claude
  committed
  8f3af5b
- Ban direct use of loguru's logger in the SDK package
  
  zeevmoney
  and
  claude
  committed
  5dfe91f
- Merge the release and CI hardening branch into the logging fix
  zeevmoney
  committed
  09bf8cd
- Warn and log at INFO for an unknown log level instead of raising
  
  zeevmoney
  and
  claude
  committed
  3e36887
- Merge the invites e2e fix from the base branch
  zeevmoney
  committed
  2573618
- Merge the RBAC e2e polling fix from the base branch
  zeevmoney
  committed
  57a9ff1
Commits on Oct 2, 2026
- Merge the base branch's RBAC e2e polling fix
  
  zeevmoney
  and
  claude
  committed
  ba6ff70
- Merge the review fixes from the base branch
  
  zeevmoney
  and
  claude
  committed
  90110a5
- Merge the base branch's backported e2e and schema fixes
  
  zeevmoney
  and
  claude
  committed
  5cc67b8
Commits on Oct 28, 2026
- PER-16680: review follow-ups: scrub every raised error body, URL user info, wait_for_sync
  
  EliMoshkovich
  and
  claude
  committed
  0d4c016
- PER-16680: second review pass: scrub carried request headers, safe URL helper
  
  EliMoshkovich
  and
  claude
  committed
  e4c411c
- PER-16680: scrub JSON object keys and the labelled log line
  
  EliMoshkovich
  and
  claude
  committed
  efbd68a
- PER-16680: scrub the request info aiohttp keeps in an error's args and redirect history
  
  EliMoshkovich
  and
  claude
  committed
  dbd45b8
Commits on Oct 29, 2026
- PER-16680: scrub error bodies labelled JSON that aren't JSON, and aiohttp error text
  
  EliMoshkovich
  and
  claude
  committed
  948c2d4
- PER-16680: build the clients in the constructors again, without a _connect hook
  
  EliMoshkovich
  and
  claude
  committed
  7641477
- PER-16680: build and scrub a log record only when a sink will receive it
  
  EliMoshkovich
  and
  claude
  committed
  7de2993
- PER-16680: say exactly what is redacted and what "enable": True undoes; lint and deps
  
  EliMoshkovich
  and
  claude
  committed
  a3aac1b
- PER-16680: scrub the errors chained under an aiohttp error, and a lower-cased key
  
  EliMoshkovich
  and
  claude
  committed
  f0e74c5
- PER-16680: the lazy-record test covers all four enforcer debug lines
  
  EliMoshkovich
  and
  claude
  committed
  feb5488
- PER-16680: note that the floor lanes run multidict 4.5.0 as pure Python
  
  EliMoshkovich
  and
  claude
  committed
  d7ff37d
- PER-16680: change only what the request raised, and never fail on a scrub
  
  EliMoshkovich
  and
  claude
  committed
  7a233d1
- PER-16680: README: what the scrub covers, and that it leaves other exceptions alone
  
  EliMoshkovich
  and
  claude
  committed
  d1e560d
Commits on Oct 30, 2026
- PER-16680: always scrub the caught error; fail closed on a key the scrub can't reach
  
  EliMoshkovich
  and
  claude
  committed
  ecc6491
- PER-16680: walk the members of an exception group under an aiohttp error
  
  authored and
  EliMoshkovich
  committed
  03ed3f0
- PER-16680: test the scrub paths the final key check would otherwise hide
  
  authored and
  EliMoshkovich
  committed
  0a547e5

Commits

Commits on Oct 1, 2026

Commits on Oct 2, 2026

Commits on Oct 28, 2026

Commits on Oct 29, 2026

Commits on Oct 30, 2026