laantungir/minibits_wallet
1
0
Fork 0
mirror of https://github.com/minibits-cash/minibits_wallet.git synced 2026-10-05 19:28:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore(logging): redact secrets in keyChain trace logs

Browse Source 
Truncate or omit sensitive values in trace-level logs: Nostr private key,
base64 seed and auth token now log only an 8-char prefix, and saveWalletKeys
logs walletId instead of the full key material.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
minibits-cash
2026-06-09 15:30:43 +02:00
co-authored by Claude Opus 4.8
parent bf356f3ba7
commit 05c069e4f8
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/services/keyChain.ts
+4 -4
View File
@@ -64,7 +64,7 @@ const generateNostrKeyPair = function () {
const privateKey = bytesToHex(privateKeyBytes)
const publicKey = getPublicKey(privateKeyBytes)
log.trace('New random Nostr keypair created', {publicKey, privateKey})
log.trace('New random Nostr keypair created', {publicKey, privateKey: privateKey.slice(0, 8) + '...'})
return {publicKey, privateKey} as NostrKeyPair
} catch (e: any) {
@@ -138,7 +138,7 @@ const generateWalletKeys = function (accountIndex: number = DEFAULT_NOSTR_ACCOUN
const seedBytesArray = bip39.mnemonicToSeedSync(mnemonic)
const seed = Buffer.from(seedBytesArray).toString('base64')
log.trace('[generateWalletKeys] Seed generated from mnemonic (base64)', {seed})
log.trace('[generateWalletKeys] Seed generated from mnemonic (base64)', {seed: seed.slice(0, 8) + '...'})
const seedHash = QuickCrypto
.createHash('sha256')
@@ -197,7 +197,7 @@ const saveWalletKeys = async function (
},
)
log.trace('[saveWalletKeys]', 'Saved wallet keys to the KeyChain', {walletKeys})
log.trace('[saveWalletKeys]', 'Saved wallet keys to the KeyChain', {walletId: walletKeys.walletId})
return result
} catch (e: any) {
@@ -284,7 +284,7 @@ const generateAuthToken = (): string => {
const uint8Array = new Uint8Array(tokenBytes)
const tokenBase64 = btoa(String.fromCharCode(...uint8Array))
log.trace('New Base64 authToken created:', tokenBase64)
log.trace('New Base64 authToken created:', tokenBase64.slice(0, 8) + '...')
return tokenBase64
} catch (e: any) {