Is there any way to disable error log ?

[elvis-cai]

Hi, we found when librechat is printing error log, it will include Bearer token which is sensitive data for us, you can find the example here

{"code":"ERR_BAD_REQUEST","config":{"adapter":["xhr","http"],"data":{"_boundary":"--------------------------347071534553879909735348","_currentStream":null,"_events":{},"_eventsCount":3,"_insideLoop":false,"_overheadLength":311,"_pendingNext":false,"_released":true,"_streams":[],"_valueLength":36,"_valuesToMeasure":[{"_events":{},"_eventsCount":2,"_readableState":{"awaitDrainWriters":null,"buffer":{"head":null,"length":0,"tail":null},"decoder":null,"defaultEncoding":"utf8","encoding":null,"errored":null,"flowing":true,"highWaterMark":65536,"length":0,"pipes":[],"state":325654},"bytesRead":3142004,"end":null,"fd":null,"flags":"r","mode":438,"path":"/app/uploads/temp/664c7b1f2802b1a717702598/《test》.pdf"}],"dataSize":0,"maxDataSize":2097152,"pauseStreams":true,"readable":true,"writable":false},"env":{},"headers":{"Accept":"application/json","Accept-Encoding":"gzip, compress, deflate, br","Authorization":"Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjY2NGM3YjFmMjgwMmIxYTcxNzcwMjU5OCIsInVzZXJuYW1lIjoieWlmYW4iLCJwcm92aWRlciI6Im9wZW5pZCIsImVtYWlsIjoieWlmYW4uZ3VAYWlyd2FsbGV4LmNvbSIsImlhdCI6MTcyMzM2OTgwMywiZXhwIjoxNzIzMzcwNzAzfQ.SPe9Cxxxxxxxxxxxxxxx","Content-Length":"3142407","Content-Type":"multipart/form-data; boundary=--------------------------347071534553879909735348","User-Agent":"axios/1.6.7"},"maxBodyLength":-1,"maxContentLength":-1,"method":"post","timeout":0,"transformRequest":[null],"transformResponse":[null],"transitional":{"clarifyTimeoutError":false,"forcedJSONParsing":true,"silentJSONParsing":true},"url":"http://librechat-rag-api:8000/embed","xsrfCookieName":"XSRF-TOKEN","xsrfHeaderName":"X-XSRF-TOKEN"},"level":"error","message":"Request failed with status code 400","name":"AxiosError","request":{"_closed":false,"_contentLength":"3142407","_defaultKeepAlive":true,"_ended":true,"_events":{},"_eventsCount":7,"_hasBody":true,"_header":"POST /embed HTTP/1.1\r\nAccept: application/json\r\nContent-Type: multipart/form-data; boundary=--------------------------347071534553879909735348\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cvbSIsImlhdJZKFWm572td4T2EbzGRl1YJpI\r\nUser-Agent: axios/1.6.7\r\nContent-Length: 3142407\r\nAccept-Encoding: gzip, compress, deflate, br\r\nHost: librechat-rag-api:8000\r\nConnection: close\r\n\r\n",

just wondering if there is any way to mask the Bearer token in the log or disable this kind of error log in librechat?
thanks

[danny-avila]

Error logging can't be disabled without fully disabling logging.

LibreChat/api/config/parsers.js

Lines 8 to 12 in f86e9dd

	const sensitiveKeys = [
	/^(sk-)[^\s]+/, // OpenAI API key pattern
	/(Bearer )[^\s]+/, // Header: Bearer token pattern
	/(api-key:? )[^\s]+/, // Header: API key pattern
	/(key=)[^\s]+/, // URL query param: sensitive key pattern (Google)

They are supposed to get redacted by this, so I will look into why it isn't.

[elvis-cai]

Awesome, great to know we already have this filter feature, thanks @danny-avila, let me know if you need more examples, we found it exists in v0.7.4-rc2 as well.

[elvis-cai]

Hi @danny-avila , Happy new year
we found the issue still occur on v0.7.5, it only occurs with the log level with error, is there anything you could help?

thank you