Add authm header to obscured list

KualiCo · Oct 15, 2018 · cc90f69 · cc90f69
1 parent 6e9756b
commit cc90f69
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/lib/server.js b/lib/server.js
@@ -43,7 +43,7 @@ function validateConfig (config) {
 }
 
 function getMiddlewareConfig (config, logger) {
-  const alwaysObscureHeaders = ['authorization', 'cookie']
+  const alwaysObscureHeaders = ['authorization', 'cookie', 'x-kuali-authm']
 
   const middleConfig = {
     headerName: 'X-Request-Id',

diff --git a/test/middleware.test.js b/test/middleware.test.js
@@ -79,13 +79,15 @@ describe('middleware', () => {
         .set('obscure', 'test')
         .set('exclude', 'test')
         .set('Authorization', 'Bearer hey')
+        .set('X-Kuali-Authm', 'my authm')
         .end((err, res) => {
           if (err) throw err
           expect(catcher.last.req.headers.obscure).toBeNull()
           expect(catcher.last.req.headers.hasOwnProperty('exclude')).toEqual(
             false
           )
           expect(catcher.last.req.headers.authorization).toBeNull()
+          expect(catcher.last.req.headers['x-kuali-authm']).toBeNull()
           done()
         })
     })