Baoyuantop commented on issue #13452: URL: https://github.com/apache/apisix/issues/13452#issuecomment-6358874846
Thanks for the report. For excluding sensitive headers (e.g. Authorization, X-Userinfo, X-Access-Token) from logger payloads while keeping the default log structure, please use the [data-mask](https://apisix.apache.org/docs/apisix/plugins/data-mask/) plugin: it can remove or redact request headers in the log phase without changing the upstream request. You can also use a custom log_format if you prefer to replace the default entry entirely. Changing the shared default log entry to drop headers for all logger plugins would be a breaking behavior change, so we are not planning to alter those defaults in this issue. I'll close this for now. Please reopen (or comment) if data-mask / log_format does not cover your case. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
