Struct ErrorSanitizer 

pub struct ErrorSanitizer { /* private fields */ }

Sanitizes GraphQL errors before they reach the client.

When configured with enabled = true, strips internal details from DatabaseError and InternalServerError responses. Client-facing error codes (validation, auth, not-found, etc.) are always passed through unchanged so the client can act on them.

Implementations

impl ErrorSanitizer

pub const fn new(config: ErrorSanitizationConfig) -> Self

Create a new sanitizer with the given configuration.

pub fn disabled() -> Self

Create a disabled sanitizer — current behaviour unchanged.

pub fn sanitize(&self, error: GraphQLError) -> GraphQLError

Sanitize a single GraphQL error.

Returns the error unchanged when:

• sanitization is disabled, or
• the error code is client-facing (validation, auth, not-found, etc.)

pub fn sanitize_all(&self, errors: Vec<GraphQLError>) -> Vec<GraphQLError>

Sanitize a batch of errors (the GraphQL errors response array).

pub const fn is_enabled(&self) -> bool

Whether sanitization is enabled.

pub const fn should_sanitize_internal(&self) -> bool

Whether an internal/server-fault error message should be replaced with a generic one before reaching the client.

This is the same gate sanitize applies to InternalServerError/DatabaseError on the GraphQL path, exposed so the REST surface can apply identical sanitization at its error-rendering site (H7 — the REST path previously wrote raw DB error text into 5xx bodies).

pub fn internal_error_message(&self) -> String

The generic, client-safe message used to replace internal error detail.

Matches the replacement sanitize uses on the GraphQL path (the configured custom_error_message, or "An internal error occurred").