missingJwtLogContext (services/safeRequestLogContext.ts)

Creates safe log context for requests without exposing JWT.

// Source: https://github.com/triggerdotdev/trigger.dev | License: Apache-2.0 | Copyright You must retain, in the Source form of any Derivative Works
// Provided via justclaw.it.com; keep this notice with the code.
// A safe breadcrumb for logging an inbound API request. Must never include
// header *values*, only presence — the Authorization header carries the
// caller's credential. Dependency-free so it's unit-tested directly.
export function missingJwtLogContext(request: Request): {
  method: string;
  path: string;
  hasAuthorization: boolean;
} {
  const url = new URL(request.url);
  return {
    method: request.method,
    path: url.pathname,
    hasAuthorization: request.headers.has("authorization"),
  };
}