# Supported rule formats:
# KEY                                            -> key rule
# /KEY/SUB_KEY                                   -> JSON path rule
# /KEY/*/SUB_KEY                                 -> JSON path wildcard rule, * matches one path segment
# /**/KEY                                        -> JSON path wildcard rule, ** matches any number of path segments
# KEY[-4:]                                       -> key rule with slice, keeps the last 4 characters
# KEY[:3]                                        -> key rule with slice, keeps the first 3 characters
# KEY[regex:^\+\d{1,2}]                          -> key rule with regex value expression
# regex:.*KEY.*                                  -> regex key rule
# regex:(?i).*KEY.*                              -> case-insensitive regex key rule
# regex:/KEY/\d+/SUB_KEY                         -> regex JSON path rule
# redactRegex=REGEX -> [:3]                      -> regex key rule with slice expression
# redactRegex=REGEX -> [regex:...]               -> regex key rule with regex value expression
# redactRegex=REGEX -> ****[regex:...]****       -> regex value expression with custom prefix and suffix masks
# filterList=/**/ARRAY[0]                       -> keeps the first array item with full data
# filterList=/**/ARRAY/*/KEY                    -> keeps only matching keys inside array items

# Default policy rules
[default]
unsecret=baseUrl

# Body
redact=authorization,api-key,password,token,Content-Type[-4:]
filter=accessToken,refreshToken,expiresIn

# Headers
headers=Authorization,Cookie,Set-Cookie,X-API-Key
headersFilter=Date,Set-Cookie

# Keep the first 3 characters and mask the rest for any key containing phone.
# Example: homePhone/businessPhone: +81 965-431-3024 -> ********+81
redactRegex=(?i).*phone.* -> [:3]

# Extract only country code for any key containing mobile.
# Example: mobile: +1 555-1234 -> +1
redactRegex=mobile -> [regex:^\+\S+]

# Login page
[login]
extends=default
redact=username

[debug_login]
extends=login
unredact=accessToken
unheaders=Set-Cookie

# Forgot password page
[forgot]
extends=login
redact=confirm_password

[debug_forgot]
extends=default
unredact=password
unheaders=X-API-Key

# Product page
[product]
extends=default
redact=/**/tags,/**/dimensions,/**/meta,/**/images,thumbnail
redact=regex:(?i).*email.*
redactRegex=title|(?i).*name.* -> [regex:\S+] ***
filterList=/**/reviews[0],/**/reviews/*/rating,/**/reviews/*/reviewerName