Basic logging with redacted sensitive headers (#3159)

Author: Vivek Maskara

app/build.gradle

@@ -53,6 +53,7 @@ dependencies {
     api('com.github.tony19:logback-android-classic:1.1.1-6') {
         exclude group: 'com.google.android', module: 'android'
     }
+    implementation "com.squareup.okhttp3:logging-interceptor:4.2.0"
 
     // Dependency injector
     implementation "com.google.dagger:dagger:$DAGGER_VERSION"

app/src/main/java/fr/free/nrw/commons/OkHttpConnectionFactory.java

@@ -31,12 +31,22 @@ private static OkHttpClient createClient() {
         return new OkHttpClient.Builder()
                 .cookieJar(SharedPreferenceCookieManager.getInstance())
                 .cache(NET_CACHE)
-                .addInterceptor(new HttpLoggingInterceptor().setLevel(HttpLoggingInterceptor.Level.BODY))
+                .addInterceptor(getLoggingInterceptor())
                 .addInterceptor(new UnsuccessfulResponseInterceptor())
                 .addInterceptor(new CommonHeaderRequestInterceptor())
                 .build();
     }
 
+    private static HttpLoggingInterceptor getLoggingInterceptor() {
+        HttpLoggingInterceptor httpLoggingInterceptor = new HttpLoggingInterceptor()
+                .setLevel(HttpLoggingInterceptor.Level.BASIC);
+
+        httpLoggingInterceptor.redactHeader("Authorization");
+        httpLoggingInterceptor.redactHeader("Cookie");
+
+        return httpLoggingInterceptor;
+    }
+
     private static class CommonHeaderRequestInterceptor implements Interceptor {
         @Override @NonNull public Response intercept(@NonNull Chain chain) throws IOException {
             Request request = chain.request().newBuilder()