censor sensitive exported JSON values

Author: araustin01

src/ffi-options.zig

@@ -494,6 +494,12 @@ fn cStr(ptr: [*c]const u8, len: usize) []const u8 {
     return ptr[0..len];
 }
 
+fn redactedStr(len: usize) []const u8 {
+    if (len == 0) return "";
+
+    return "REDACTED";
+}
+
 const ffi_options_top_level_args_json_ish_placeholder =
     \\    "logger_level": "{s}",
     \\    "transport_kind": "{s}",
@@ -607,10 +613,10 @@ fn ffiOptionsAuthToJSON(allocator: std.mem.Allocator, o: *const FFIOptions) ![]u
         ffi_options_auth_args_json_ish_placeholder,
         .{
             cStr(o.auth.username, o.auth.username_len),
-            cStr(o.auth.password, o.auth.password_len),
+            redactedStr(o.auth.password_len),
             cStr(o.auth.private_key_path, o.auth.private_key_path_len),
-            cStr(o.auth.private_key_passphrase, o.auth.private_key_passphrase_len),
-            cStr(o.auth.private_key_content, o.auth.private_key_content_len),
+            redactedStr(o.auth.private_key_passphrase_len),
+            redactedStr(o.auth.private_key_content_len),
             optBool(o.auth.force_in_session_auth),
             optBool(o.auth.bypass_in_session_auth),
             cStr(o.auth.username_pattern, o.auth.username_pattern_len),