feat: add telescope style

internal/telescope/telescope_test.go

@@ -8,7 +8,7 @@ import (
 )
 
 func TestRingOrderAndOverflow(t *testing.T) {
-	tel := New(3)
+	tel := New(3, nil, nil)
 	for i := 0; i < 5; i++ {
 		tel.add(Entry{Path: string(rune('a' + i))})
 	}
@@ -29,43 +29,76 @@ func TestRingOrderAndOverflow(t *testing.T) {
 	}
 }
 
-func TestMiddlewareCapturesErrorBodyMasked(t *testing.T) {
-	tel := New(10)
+func TestMiddlewareCapturesPayloadHeadersResponseMasked(t *testing.T) {
+	tel := New(10, nil, nil)
 	h := tel.Middleware(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
 		w.WriteHeader(http.StatusBadRequest)
+		_, _ = w.Write([]byte(`{"token":"xyz","message":"bad"}`))
 	}))
 	req := httptest.NewRequest(http.MethodPost, "/api/x",
 		strings.NewReader(`{"password":"secret","kind":"coin"}`))
+	req.Header.Set("Authorization", "Bearer supersecret")
 	h.ServeHTTP(httptest.NewRecorder(), req)
 
 	e := tel.Entries()
 	if len(e) != 1 || e[0].Status != 400 {
 		t.Fatalf("expected one 400 entry, got %+v", e)
 	}
-	if !strings.Contains(e[0].Body, `"password":"***"`) {
-		t.Errorf("password not masked: %s", e[0].Body)
+	// payload برای هر درخواست ثبت می‌شود و مقادیرِ حساس ماسک می‌شوند.
+	if !strings.Contains(e[0].ReqBody, `"password":"***"`) {
+		t.Errorf("password not masked: %s", e[0].ReqBody)
 	}
-	if !strings.Contains(e[0].Body, `"kind":"coin"`) {
-		t.Errorf("non-secret field lost: %s", e[0].Body)
+	if !strings.Contains(e[0].ReqBody, `"kind":"coin"`) {
+		t.Errorf("non-secret field lost: %s", e[0].ReqBody)
+	}
+	// پاسخ ثبت و توکنِ آن ماسک می‌شود.
+	if !strings.Contains(e[0].RespBody, `"token":"***"`) {
+		t.Errorf("response token not masked: %s", e[0].RespBody)
+	}
+	// هدرِ Authorization در نمایش پنهان می‌شود.
+	if strings.Contains(e[0].Headers, "supersecret") {
+		t.Errorf("authorization header leaked: %s", e[0].Headers)
+	}
+	if !strings.Contains(e[0].Headers, "Authorization: ***") {
+		t.Errorf("authorization header not masked: %s", e[0].Headers)
 	}
 }
 
-func TestMiddlewareOKHasNoBody(t *testing.T) {
-	tel := New(10)
+func TestMobileFromLoginBody(t *testing.T) {
+	tel := New(10, nil, nil)
 	h := tel.Middleware(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
 		w.WriteHeader(http.StatusOK)
 	}))
-	req := httptest.NewRequest(http.MethodPost, "/api/y",
-		strings.NewReader(`{"token":"abc"}`))
+	req := httptest.NewRequest(http.MethodPost, "/api/auth/login-otp",
+		strings.NewReader(`{"mobile":"09120000000"}`))
 	h.ServeHTTP(httptest.NewRecorder(), req)
 	e := tel.Entries()
-	if len(e) != 1 || e[0].Body != "" {
-		t.Errorf("2xx should not store body, got %+v", e)
+	if len(e) != 1 || e[0].Mobile != "09120000000" {
+		t.Errorf("mobile not extracted from login body, got %+v", e)
+	}
+}
+
+func TestResolveMobileByUserID(t *testing.T) {
+	tel := New(10,
+		func(*http.Request) int64 { return 42 },
+		func(id int64) string {
+			if id == 42 {
+				return "09121112233"
+			}
+			return ""
+		})
+	h := tel.Middleware(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		w.WriteHeader(http.StatusOK)
+	}))
+	h.ServeHTTP(httptest.NewRecorder(), httptest.NewRequest(http.MethodGet, "/api/me", nil))
+	e := tel.Entries()
+	if len(e) != 1 || e[0].Mobile != "09121112233" || e[0].UserID != 42 {
+		t.Errorf("mobile not resolved by user id, got %+v", e)
 	}
 }
 
 func TestMiddlewareSkipsWS(t *testing.T) {
-	tel := New(10)
+	tel := New(10, nil, nil)
 	h := tel.Middleware(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
 		w.WriteHeader(http.StatusOK)
 	}))