Shuai Lin f3d9cb2b85 security: implement HTTP access log API key redaction ...

- Add AccessLogFormatter class with regex patterns for API key detection
- Create setup_access_logging() function to configure uvicorn access logs
- Support redaction for Google/Gemini (AIza*) and OpenAI (sk-*) API keys
- Configure main.py to use custom access logging with redaction
- Prevent API key exposure in HTTP access logs like "POST /verify-key/AIza..."

Now access logs show: "POST /verify-key/AIzaxx...xyzxyz" instead of full keys

2025-07-21 10:09:29 +08:00

..

logger.py

security: implement HTTP access log API key redaction

2025-07-21 10:09:29 +08:00