[Feature Request]: cleanup headers.Authorization from network traces

#125 · open · 1 comments

View on GitHub ↗

drzraf

### Is your feature request related to a problem? > `[2026-05-26T18:43:49.013784-05:00] HTTP.ERROR: WP HTTP API Error {"transport":"WpOrg\\Requests\\Requests","context":"response","query_args":{"method":"POST","....,"headers":{"Accept":"application/json","Authorization":"Bearer ....","Content-Type":"application/json"},"cookies":[],....` It not unreasonable to think these should be cleared by default and only exposed if users choose to (only case would be willingly debugging/inspecting authentication issues). There is a vast amount of PII which can already transit through a network logs of failed requests, but Bearer is incontestably one of these you don't want to spread. ### Describe the desired solution HTTP.ERROR can be clearly identified as are `WpOrg\\Requests\\Requests`. Scrubbing that header is doable from within Wonolog. ### Describe the alternatives that you have considered . ### Additional context _No response_ ### Code of Conduct - [x] I agree to follow this project's Code of Conduct

Comments

gmazzap

Thanks @drzraf This totally makes sense and has been added to our TODO list ofr this pakage.