qubit-redact 0.4.0

Rule-driven redaction for fields, diagnostics, HTTP data, and Rust domain objects
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72

// =============================================================================
//    Copyright (c) 2025 - 2026 Haixing Hu.
//
//    SPDX-License-Identifier: Apache-2.0
//
//    Licensed under the Apache License, Version 2.0.
// =============================================================================
//! Tests for [`RedactedHeaders`](qubit_redact::http::RedactedHeaders).

use std::fmt::{
    Debug,
    Display,
};

use http::{
    HeaderMap,
    HeaderValue,
};
use qubit_redact::{
    LogSafeText,
    http::{
        HttpRedactor,
        RedactedHeaders,
    },
};

/// Alternate text query used as an unselected function-pointer target.
fn alternate_log_safe_text(headers: &RedactedHeaders) -> &LogSafeText<'static> {
    headers.log_safe_text()
}

/// Alternate consuming query used as an unselected function target.
fn alternate_into_log_safe_text(
    headers: RedactedHeaders,
) -> LogSafeText<'static> {
    headers.into_log_safe_text()
}

/// Verifies redacted header output does not expose an authorization value.
#[test]
fn test_redacted_headers_hides_authorization_value() {
    let mut headers = HeaderMap::new();
    headers.insert("authorization", HeaderValue::from_static("Bearer raw"));
    let redacted = HttpRedactor::default().redact_headers(&headers);
    let selected = usize::from(std::process::id() == 0);
    let borrowed_text: [for<'a> fn(
        &'a RedactedHeaders,
    ) -> &'a LogSafeText<'static>; 2] =
        [RedactedHeaders::log_safe_text, alternate_log_safe_text];
    let owned_text: [fn(RedactedHeaders) -> LogSafeText<'static>; 2] = [
        RedactedHeaders::into_log_safe_text,
        alternate_into_log_safe_text,
    ];
    let alternate_display = "alternate";
    let display: &dyn Display = if selected == 0 {
        &redacted
    } else {
        &alternate_display
    };
    let debug: &dyn Debug = if selected == 0 {
        &redacted
    } else {
        &alternate_display
    };
    let rendered = display.to_string();
    let debug = format!("{debug:?}");

    assert!(!rendered.contains("Bearer raw"));
    assert_eq!(borrowed_text[selected](&redacted).as_ref(), rendered);
    assert!(debug.contains("RedactedHeaders"));
    assert_eq!(owned_text[selected](redacted).as_ref(), rendered);
}