Skip to main content

Auditing / HTTP Client Logging - Releases

← App details

Nextcloud 34

Auditing / HTTP Client Logging 1.0.0
Release Details
UpdatedJuly 20, 2026, 9:10 a.m.
Changelog

Breaking

  • All config keys were renamed to the audit_http_client_* scheme (audit_http_client_logdir, …_loglevel, …_format, …_exclude_domains); the old 0.2.0 key names are no longer read, there is no fallback — rename them in config.php when upgrading.

Added

  • Redact sensitive request and response headers by default
  • Redact credentials from logged URIs (query parameters and path secrets)

Fixed

  • Declare supported PHP versions
  • Adopt the optional handler parameter added to IClientService in NC 35
  • Replace the memcache stats store with a process-local array
  • Report immediate-path compression stats honestly and injection failures louder
  • Make middleware injection idempotent and header lookups case-insensitive
  • Clamp the log level and count rewound stream reads once
  • Substitute broken UTF-8 in log entries instead of dropping them; rethrow non-throwable rejection reasons cleanly
  • Derive stream consumption from the read position and report detached bodies as unknown
Licenses AGPLv3+
Certificate-----BEGIN CERTIFICATE-----
MIIEEjCCAvoCAhOhMA0GCSqGSIb3DQEBCwUAMHsxCzAJBgNVBAYTAkRFMRswGQYD
VQQIDBJCYWRlbi1XdWVydHRlbWJlcmcxFzAVBgNVBAoMDk5leHRjbG91ZCBHbWJI
MTYwNAYDVQQDDC1OZXh0Y2xvdWQgQ29kZSBTaWduaW5nIEludGVybWVkaWF0ZSBB
dXRob3JpdHkwHhcNMjYwNzIwMDg0MDMwWhcNMzYxMDI1MDg0MDMwWjAiMSAwHgYD
VQQDDBdhZG1pbl9hdWRpdF9odHRwX2NsaWVudDCCAiIwDQYJKoZIhvcNAQEBBQAD
ggIPADCCAgoCggIBAI9Dd9hNx/lUi3RTZJop4tYRmUQp86fNX4X2DS2RnAGIbUUT
rH23P5o/8cau+0+WnMwNQWAa4J/EhL8c5m7fWXCzQHleFpun45ubUaUxnf5Prf2u
7eROIgL8hGksJ345e0HHP/ShgmmvHtti34RV/kxNgN2r4XJGE3rQso72jHDt6czW
fOp2co9cB4NQPVzaIE3qa3J+gvP00cyR5j9RnRPKOI5lC+hC9SuaMNZ0bCAcj6YN
LndPqCpH5Y+uKy9ZEgZlptD8o9ojgXtQodwE8celK8Nc4mmvKK5NehQAyKb2GjIV
MPbsvNcatxu7mCMw9zRMnLxXZgX5q578XezeTymOll9kOkIO59yCU3E85RAOVIQb
IoHKOp1TUInTQ0TOhVdpxaRAc62fH4ClmTbvY3ay2BzeukzGBdLAgX5g/+2Tazq3
dQQPC9qTdBu20xQMvXHpFW9X0z+xSg1IwEGaHpi68eHCUTIvRaRbc9yBggANCGMQ
TEGYjflBwmzAOblExu7ZapZ3gPcgZjM8wZqXHfTc4flWdl7cYY/ifId3xw6Nr+rW
k6apAbfqZQgxWnnT8ShrJjyi+a/bS2FN+5siaAdTm2LFFEVS3sIF7mpMvDIpfIW0
U2A3TjWaaIq/TyO/eWghcLxafe65inNj9mJVSE90KlTQVdAmTwMcFkkXT4YxAgMB
AAEwDQYJKoZIhvcNAQELBQADggEBAHToriLANPBXIbiTdK1JvIqWXdQbF4UL92w3
bCx2rZYQvET6BmP72eyXQB45v49ZHax6BGyBcW+RkvvRRiz0iabIcP0QfWF6wo5l
KaunDRjMQWZ3OS28xyruosbTj/eDom800bpwTlqZUaVb4JDXjd+41U9KQAr/BJga
dbF70EoBPH1JJvcLhQ+f2u5bwjWmKMqO6f/4q3MhEcftdEFzcxBWmPuip3xKagbP
fnV6sq7eSNYc2A4UTg7SE4auHP2iVIWtEw0zHkUXpP3XHGnt82qtSEziW0rct4XA
YVEyvrG4CiSeZrnDNYsU/Z6Qg8b6VqfiHMBx2D7++ZP1DiiSy+4=
-----END CERTIFICATE-----
SignatureHgT6/uRoDV4lGkJptPOviO9RZGFbjH8/sszd0hz7t3URm6mykaXJRC9Mboo6Ivo09fAgpR2HWHFmMT24BrOI6VBTRnGInCDH3HhogbDlxOEGxqRToMNM4TdYgoCNjzSCYb7S2m2HHS9tvE1vqcvnnrRAvCIYbdNAQ5/boAAKPa++cJMTVcpGX+grYfShuXBqBNCaGAPrIxxE9jQUFbry0njQpqqShBf2z0NZHJ2Y2l1PfJFbC6tT6uA74mNelm2rpeDP6Tpkp5dZHRQi2PEjUsdDiW13SWRgOESdn6PhRLwQFOmS2IYN4ZSKHs2mtbomxO5K4SNTvhBuN+Cb+MwLcgB2mVfaAGe1fvfmXtNdJ7irctW+TY1LfTaxwDYyQDNLN3zyXYqZkq6eXEt3h+Qcg9qSGOkImGbYWRSyHIWFBvlVV8xhR8rVRi2eSRtQVXMs9Vdh94CEhGnju4E44qoSzWL0RZ8oXRT4UvTrCT7OHJrdbQ8xMAh0nTJEqZrREUkH6tCzDjLA6QqMiag6KixN5rkiQ9opibHuvXaVsy0RW3CrgvlFc1kc7fM9w11hwEhCgh6xVSBlHAfuhM7BGaORGSbP0B87iZrgYrSYHYkEar+Lifnu+425SRDzB1ipteFl2kxnjjAymIEoRzvC4ZH2ouxLwwqIm+tmXjR5n+B/8gA=
Signature digestsha512
Dependencies
Required Nextcloud versions >=32.0.0,<36.0.0
Minimum Integer bits32
PHP>=8.1.0,<8.6.0

Nextcloud 33

Auditing / HTTP Client Logging 1.0.0
Release Details
UpdatedJuly 20, 2026, 9:10 a.m.
Changelog

Breaking

  • All config keys were renamed to the audit_http_client_* scheme (audit_http_client_logdir, …_loglevel, …_format, …_exclude_domains); the old 0.2.0 key names are no longer read, there is no fallback — rename them in config.php when upgrading.

Added

  • Redact sensitive request and response headers by default
  • Redact credentials from logged URIs (query parameters and path secrets)

Fixed

  • Declare supported PHP versions
  • Adopt the optional handler parameter added to IClientService in NC 35
  • Replace the memcache stats store with a process-local array
  • Report immediate-path compression stats honestly and injection failures louder
  • Make middleware injection idempotent and header lookups case-insensitive
  • Clamp the log level and count rewound stream reads once
  • Substitute broken UTF-8 in log entries instead of dropping them; rethrow non-throwable rejection reasons cleanly
  • Derive stream consumption from the read position and report detached bodies as unknown
Licenses AGPLv3+
Certificate-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
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
Signature digestsha512
Dependencies
Required Nextcloud versions >=32.0.0,<36.0.0
Minimum Integer bits32
PHP>=8.1.0,<8.6.0

Nextcloud 32

Auditing / HTTP Client Logging 1.0.0
Release Details
UpdatedJuly 20, 2026, 9:10 a.m.
Changelog

Breaking

  • All config keys were renamed to the audit_http_client_* scheme (audit_http_client_logdir, …_loglevel, …_format, …_exclude_domains); the old 0.2.0 key names are no longer read, there is no fallback — rename them in config.php when upgrading.

Added

  • Redact sensitive request and response headers by default
  • Redact credentials from logged URIs (query parameters and path secrets)

Fixed

  • Declare supported PHP versions
  • Adopt the optional handler parameter added to IClientService in NC 35
  • Replace the memcache stats store with a process-local array
  • Report immediate-path compression stats honestly and injection failures louder
  • Make middleware injection idempotent and header lookups case-insensitive
  • Clamp the log level and count rewound stream reads once
  • Substitute broken UTF-8 in log entries instead of dropping them; rethrow non-throwable rejection reasons cleanly
  • Derive stream consumption from the read position and report detached bodies as unknown
Licenses AGPLv3+
Certificate-----BEGIN CERTIFICATE-----
MIIEEjCCAvoCAhOhMA0GCSqGSIb3DQEBCwUAMHsxCzAJBgNVBAYTAkRFMRswGQYD
VQQIDBJCYWRlbi1XdWVydHRlbWJlcmcxFzAVBgNVBAoMDk5leHRjbG91ZCBHbWJI
MTYwNAYDVQQDDC1OZXh0Y2xvdWQgQ29kZSBTaWduaW5nIEludGVybWVkaWF0ZSBB
dXRob3JpdHkwHhcNMjYwNzIwMDg0MDMwWhcNMzYxMDI1MDg0MDMwWjAiMSAwHgYD
VQQDDBdhZG1pbl9hdWRpdF9odHRwX2NsaWVudDCCAiIwDQYJKoZIhvcNAQEBBQAD
ggIPADCCAgoCggIBAI9Dd9hNx/lUi3RTZJop4tYRmUQp86fNX4X2DS2RnAGIbUUT
rH23P5o/8cau+0+WnMwNQWAa4J/EhL8c5m7fWXCzQHleFpun45ubUaUxnf5Prf2u
7eROIgL8hGksJ345e0HHP/ShgmmvHtti34RV/kxNgN2r4XJGE3rQso72jHDt6czW
fOp2co9cB4NQPVzaIE3qa3J+gvP00cyR5j9RnRPKOI5lC+hC9SuaMNZ0bCAcj6YN
LndPqCpH5Y+uKy9ZEgZlptD8o9ojgXtQodwE8celK8Nc4mmvKK5NehQAyKb2GjIV
MPbsvNcatxu7mCMw9zRMnLxXZgX5q578XezeTymOll9kOkIO59yCU3E85RAOVIQb
IoHKOp1TUInTQ0TOhVdpxaRAc62fH4ClmTbvY3ay2BzeukzGBdLAgX5g/+2Tazq3
dQQPC9qTdBu20xQMvXHpFW9X0z+xSg1IwEGaHpi68eHCUTIvRaRbc9yBggANCGMQ
TEGYjflBwmzAOblExu7ZapZ3gPcgZjM8wZqXHfTc4flWdl7cYY/ifId3xw6Nr+rW
k6apAbfqZQgxWnnT8ShrJjyi+a/bS2FN+5siaAdTm2LFFEVS3sIF7mpMvDIpfIW0
U2A3TjWaaIq/TyO/eWghcLxafe65inNj9mJVSE90KlTQVdAmTwMcFkkXT4YxAgMB
AAEwDQYJKoZIhvcNAQELBQADggEBAHToriLANPBXIbiTdK1JvIqWXdQbF4UL92w3
bCx2rZYQvET6BmP72eyXQB45v49ZHax6BGyBcW+RkvvRRiz0iabIcP0QfWF6wo5l
KaunDRjMQWZ3OS28xyruosbTj/eDom800bpwTlqZUaVb4JDXjd+41U9KQAr/BJga
dbF70EoBPH1JJvcLhQ+f2u5bwjWmKMqO6f/4q3MhEcftdEFzcxBWmPuip3xKagbP
fnV6sq7eSNYc2A4UTg7SE4auHP2iVIWtEw0zHkUXpP3XHGnt82qtSEziW0rct4XA
YVEyvrG4CiSeZrnDNYsU/Z6Qg8b6VqfiHMBx2D7++ZP1DiiSy+4=
-----END CERTIFICATE-----
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
Signature digestsha512
Dependencies
Required Nextcloud versions >=32.0.0,<36.0.0
Minimum Integer bits32
PHP>=8.1.0,<8.6.0