Logflare / logflare / d34c9f9e75fd8fa48af5db18cd80a544e18ef230

81%

push

github

fix(webhook): restore redacted secret headers on config update (#3559)

* fix(webhook): restore redacted secret headers on config update

redact_config/1 masks secret headers (e.g. Authorization) as the literal
string "REDACTED" when a backend is serialized, so clients never receive
the real value. On update the client echoes the sentinel back for unchanged
headers, and because cast_config replaces the whole headers map, the stored
secret was being overwritten with "REDACTED" (or dropped entirely if the
client stripped the sentinel) — silently breaking authenticated webhook /
log drain destinations whenever any other header changed.

cast_config now un-redacts: for each submitted header still set to the
sentinel, the existing stored value is swapped back in (and dropped if there
is nothing to restore). Headers the user actually changed pass through, an
empty map still clears all headers, and omitting headers keeps them as-is.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* Format

* Reduce nesting for lint

* Fix

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Brian <brianshan@gmail.com>

11 of 11 new or added lines in 1 file covered. (100.0%)

12792 of 15804 relevant lines covered (80.94%)

3790.14 hits per line