updated regex for finding JWT

supabase · Oct 2, 2024 · dd4cdc1 · dd4cdc1
1 parent b627070
commit dd4cdc1
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/realtime/logging_util.py b/realtime/logging_util.py
@@ -1,7 +1,11 @@
 import logging
 import re
 
-redact = r"(eyJh\w*\.)(\w*)\."
+# redaction regex for detecting JWT tokens
+# <header>.<payload>.<signature>
+# character set [a-zA-Z0-9_-]
+# \w covers [a-zA-Z0-9]
+redact = r"(eyJh[-_\w]*\.)([-_\w]*)\."
 
 
 class TokenMaskingFilter(logging.Filter):