Release v0.1.8

src/govoplan_core/audit/logging.py

@@ -20,30 +20,13 @@ from govoplan_core.core.events import (
 )
 from govoplan_core.core.runtime import get_registry
 from govoplan_core.privacy.retention import sanitize_audit_details_for_policy
+from govoplan_core.security.redaction import redact_secret_values
 
 
 AUDIT_MODULE_ID = "audit"
 AUDIT_TENANT_EVENTS_COLLECTION = "audit.admin.tenant_events"
 AUDIT_SYSTEM_EVENTS_COLLECTION = "audit.admin.system_events"
 
-SENSITIVE_DETAIL_KEYS = {
-    "password",
-    "smtp_password",
-    "imap_password",
-    "secret",
-    "api_key",
-    "token",
-    "access_token",
-    "refresh_token",
-    "authorization",
-    "cookie",
-    "credentials",
-    "credential",
-    "private_key",
-    "claim_token",
-    "build_token",
-}
-
 _ACTION_MODULE_PREFIXES = {
     "api_key": "access",
     "configuration_change": "access",
@@ -90,17 +73,7 @@ def _compact_trace(trace: Mapping[str, object] | None) -> dict[str, str]:
 
 
 def _sanitize_details(value: Any) -> Any:
-    if isinstance(value, dict):
-        sanitized: dict[str, Any] = {}
-        for key, item in value.items():
-            if str(key).lower() in SENSITIVE_DETAIL_KEYS:
-                sanitized[key] = "<redacted>"
-            else:
-                sanitized[key] = _sanitize_details(item)
-        return sanitized
-    if isinstance(value, list):
-        return [_sanitize_details(item) for item in value]
-    return value
+    return redact_secret_values(value)
 
 
 def audit_operation_context(