From b46a95a9e2b87d86ffcf030ee2adb3da996342ac Mon Sep 17 00:00:00 2001
From: Rhys Arkins <rhys@arkins.net>
Date: Mon, 2 Jul 2018 19:25:23 +0200
Subject: [PATCH] refactor: debug log npm token for each lookup

---
 lib/datasource/npm.js | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/lib/datasource/npm.js b/lib/datasource/npm.js
index 609351de2e..b4b31341b9 100644
--- a/lib/datasource/npm.js
+++ b/lib/datasource/npm.js
@@ -40,9 +40,9 @@ function maskToken(token) {
   if (!token) {
     return token;
   }
-  return `${token.substring(0, 2)}${new Array(token.length - 3).join(
+  return `${token.substring(0, 1)}${new Array(token.length - 1).join(
     '*'
-  )}${token.slice(-2)}`;
+  )}${token.slice(-1)}`;
 }
 
 function setNpmrc(input, exposeEnv = false) {
@@ -130,6 +130,11 @@ async function getDependencyInner(name, retries = 5) {
       authInfo.type = 'Basic';
     }
     headers.authorization = `${authInfo.type} ${authInfo.token}`;
+    logger.debug(
+      `Looking up npm dependency ${name} with token ${maskToken(
+        authInfo.token
+      )}`
+    );
   } else if (process.env.NPM_TOKEN && process.env.NPM_TOKEN !== 'undefined') {
     headers.authorization = `Bearer ${process.env.NPM_TOKEN}`;
   }
-- 
GitLab