Merge pull request contentful#249 from ghepting/gary/redact-cma-token…

…s-from-vcr-cassettes

configure VCR to redact CMA tokens

CHANGELOG.md

@@ -1,6 +1,7 @@
 # Change Log
 
 ## Master
+* Configured VCR to redact sensitive data
 
 ## 3.6.0
 * Updated readme for Entry References

spec/support/vcr.rb

@@ -5,6 +5,15 @@
   c.ignore_localhost = true
   c.hook_into :webmock
   c.default_cassette_options = {record: :once}
+
+  # Redact Contentful Management API tokens from VCR recordings
+  c.filter_sensitive_data('<ACCESS_TOKEN>') do |interaction|
+    if (auths = interaction.request.headers['Authorization']&.first)
+      if (match = auths.match(/^Bearer\s+([^,\s]+)/))
+        match.captures.first
+      end
+    end
+  end
 end
 
 def vcr(name, &block)