Merge pull request #25 from zenstackhq/dev

fix: Added redactDatabaseUrl() utility that masks username/password with ***  before logging (#24)

Author: jiashengguo

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zenstackhq/proxy",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "A CLI tool to run an Express server that proxies CRUD requests to a ZenStack backend",
   "main": "index.js",
   "publishConfig": {
@@ -24,7 +24,7 @@
   "author": "",
   "license": "MIT",
   "dependencies": {
-    "@prisma/adapter-better-sqlite3": "^6.2.1",
+    "@prisma/adapter-better-sqlite3": "^7.3.0",
     "@prisma/adapter-mariadb": "^7.1.0",
     "@prisma/adapter-pg": "^6.18.0",
     "@zenstackhq/server": "^2.0.0",

pnpm-lock.yaml

@@ -2,7 +2,7 @@ import * as path from 'path'
 import express from 'express'
 import cors from 'cors'
 import { ZenStackMiddleware } from '@zenstackhq/server/express'
-import { GeneratorConfig, ZModelConfig } from './zmodel-parser'
+import { ZModelConfig } from './zmodel-parser'
 import { getNodeModulesFolder, getPrismaVersion, getZenStackVersion } from './utils/version-utils'
 import { blue, grey } from 'colors'
 import semver from 'semver'
@@ -46,6 +46,22 @@ function resolveSQLitePath(filePath: string, prismaSchemaDir: string): string {
   return path.join(prismaSchemaDir, filePath)
 }
 
+function redactDatabaseUrl(url: string): string {
+  try {
+    const parsedUrl = new URL(url)
+    if (parsedUrl.password) {
+      parsedUrl.password = '***'
+    }
+    if (parsedUrl.username) {
+      parsedUrl.username = '***'
+    }
+    return parsedUrl.toString()
+  } catch {
+    // If URL parsing fails, return the original (might be a file path for SQLite)
+    return url
+  }
+}
+
 /**
  * Create database adapter based on provider
  */
@@ -79,7 +95,7 @@ function createAdapter(config: ZModelConfig, zmodelSchemaDir: string): any {
     case 'postgresql': {
       try {
         const { PrismaPg } = require('@prisma/adapter-pg')
-        console.log(grey(`Connecting to PostgreSQL database at: ${url}`))
+        console.log(grey(`Connecting to PostgreSQL database at: ${redactDatabaseUrl(url)}`))
         return new PrismaPg({ connectionString: url })
       } catch (error) {
         throw new CliError(
@@ -90,7 +106,7 @@ function createAdapter(config: ZModelConfig, zmodelSchemaDir: string): any {
     case 'mysql': {
       try {
         const { PrismaMariaDB } = require('@prisma/adapter-mariadb')
-        console.log(grey(`Connecting to MySQL/MariaDB database at: ${url}`))
+        console.log(grey(`Connecting to MySQL/MariaDB database at: ${redactDatabaseUrl(url)}`))
         return new PrismaMariaDB({
           url,
         })