From e87415c8c4b549b2ef5c08df433b549044c111ae Mon Sep 17 00:00:00 2001
From: Dave Frey <perfectritone@gmail.com>
Date: Thu, 14 Nov 2024 13:32:16 -0500
Subject: [PATCH] Add option to not filter_authorization

---
 Readme.md                |  1 +
 lib/http_logger.rb       |  8 +++++++-
 spec/http_logger_spec.rb | 17 +++++++++++++++--
 3 files changed, 23 insertions(+), 3 deletions(-)

diff --git a/Readme.md b/Readme.md
index c37c3ff..f55c549 100644
--- a/Readme.md
+++ b/Readme.md
@@ -26,6 +26,7 @@ HttpLogger.ignore = [/newrelic\.com/]
 HttpLogger.log_headers = false  # Default: false
 HttpLogger.log_request_body  = false  # Default: true
 HttpLogger.log_response_body = false  # Default: true
+HttpLogger.filter_authorization = false  # Default: true
 HttpLogger.level = :info # Desired log level as a symbol. Default: :debug
 HttpLogger.collapse_body_limit # Change default truncate limit. Default: 5000
 ```
diff --git a/lib/http_logger.rb b/lib/http_logger.rb
index 6762223..9100ec5 100644
--- a/lib/http_logger.rb
+++ b/lib/http_logger.rb
@@ -29,6 +29,7 @@ class << self
     attr_accessor :log_headers
     attr_accessor :log_request_body
     attr_accessor :log_response_body
+    attr_accessor :filter_authorization
     attr_accessor :logger
     attr_accessor :colorize
     attr_accessor :ignore
@@ -38,6 +39,7 @@ class << self
   self.log_headers = false
   self.log_request_body = true
   self.log_response_body = true
+  self.filter_authorization = true
   self.colorize = true
   self.collapse_body_limit = 5000
   self.ignore = []
@@ -91,7 +93,11 @@ def log_request_headers(request)
   end
 
   def log_header(type, name, value)
-    value = "<filtered>" if name == AUTHORIZATION_HEADER
+    if name == AUTHORIZATION_HEADER
+      if self.class.filter_authorization
+        value = "<filtered>"
+      end
+    end
     log("HTTP #{type} header", "#{name}: #{value}")
   end
 
diff --git a/spec/http_logger_spec.rb b/spec/http_logger_spec.rb
index 571ab93..401592f 100644
--- a/spec/http_logger_spec.rb
+++ b/spec/http_logger_spec.rb
@@ -57,10 +57,23 @@
 
     context "authorization header" do
 
+      let(:bearer_token) { "Basic #{Base64.encode64('hello:world')}".strip }
       let(:request_headers) do
-        {'Authorization' => "Basic #{Base64.encode64('hello:world')}".strip}
+        {'Authorization' => bearer_token}
+      end
+
+      context "filtered" do
+        it { should include("Authorization: <filtered>") }
+      end
+
+      context "not filtered" do
+
+        before(:each) do
+          HttpLogger.filter_authorization = false
+        end
+
+        it { should include("Authorization: #{bearer_token}") }
       end
-      it { should include("Authorization: <filtered>") }
     end
 
     after(:each) do