From a5d89888d84539d78244fb3942a2b2d9dd8fc601 Mon Sep 17 00:00:00 2001
From: ciregenz <ciregenz@berkeley.edu>
Date: Thu, 18 Jun 2026 04:19:35 -0700
Subject: [PATCH] [eric] drm: redact Authorization bearer token in [drm-req]
 license logging

(cherry picked from commit 7b32eeea602e436e102fe7578bf50eccace6e0e0)
---
 electron/main.js | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/electron/main.js b/electron/main.js
index 56d45f63..f1387610 100644
--- a/electron/main.js
+++ b/electron/main.js
@@ -1752,7 +1752,13 @@ app.whenReady().then(async () => {
       console.log(`[drm-req] ${details.method} ${details.url}`);
       for (const [k, v] of Object.entries(details.requestHeaders || {})) {
         if (/content-type|origin|referer|auth|accept/i.test(k)) {
-          console.log(`[drm-req]   ${k}: ${v}`);
+          // Keep the auth scheme for debugging, never the token itself.
+          let safe = v;
+          if (/authorization/i.test(k)) {
+            const sp = String(v).indexOf(' ');
+            safe = sp > 0 ? `${String(v).slice(0, sp)} <redacted>` : '<redacted>';
+          }
+          console.log(`[drm-req]   ${k}: ${safe}`);
         }
       }
     },