Obfuscate log stream secrets (#800)

* Obfuscating Datadog API key from export

* Re-recording tests

---------

Co-authored-by: Will Vedder <[email protected]>

Author: willvedd

src/tools/auth0/handlers/logStreams.ts

@@ -41,7 +41,11 @@ export default class LogStreamsHandler extends DefaultAPIHandler {
       type: 'logStreams',
       stripUpdateFields: ['type'],
       stripCreateFields: ['status', 'sink.awsPartnerEventSource'],
-      sensitiveFieldsToObfuscate: ['sink.httpAuthorization'],
+      sensitiveFieldsToObfuscate: [
+        'sink.httpAuthorization',
+        'sink.splunkToken',
+        'sink.datadogApiKey',
+      ],
     });
   }
 

test/e2e/recordings/should-deploy-directory-(JSON)-config-with-keyword-replacements.json

@@ -110,7 +110,6 @@
                 "enable_public_signup_user_exists_error": true,
                 "enable_sso": true,
                 "enforce_client_authentication_on_passwordless_start": true,
-                "new_universal_login_experience_enabled": true,
                 "universal_login": true,
                 "use_scope_descriptions_for_consent": false,
                 "revoke_refresh_token_grant": false,
@@ -171,7 +170,6 @@
                 "enable_legacy_logs_search_v2": false,
                 "enable_public_signup_user_exists_error": true,
                 "enable_sso": true,
-                "new_universal_login_experience_enabled": true,
                 "universal_login": true,
                 "use_scope_descriptions_for_consent": false,
                 "revoke_refresh_token_grant": false,