Exclude authorisation header from api logs

api_logs/api-logs.go

@@ -60,6 +60,14 @@ func GenerateIncomingAPILog(startTime time.Time, requestID *string, claim map[st
 		typeString = "webhook-incoming"
 	}
 
+	// Remove the API key in the header
+	if req.Headers["authorization"] != "" {
+		req.Headers["authorization"] = "***"
+	}
+	if req.Headers["Authorization"] != "" {
+		req.Headers["Authorization"] = "***"
+	}
+
 	apiLog := ApiLog{
 		StartTime:           startTime,
 		EndTime:             endTime,