log: redact secret and otpsecret from request bodies

Extend the request-log redaction set beyond password/confirm so NWC connection
secrets and TOTP seeds never reach the req/res logs.

Co-Authored-By: Claude Opus 4.8 <[email protected]>
Claude-Session: https://claude.ai/code/session_01XiwgmQKwKnRxUmVDd4xSf7

1 files changed, 1 insertions, 1 deletions

diff --git a/lib/app.ts b/lib/app.ts
index 1a2102bd..3b00c702 100644
--- a/lib/app.ts
+++ b/lib/app.ts
@@ -24,7 +24,7 @@ const resLogger = pino(pino.destination("res"));
 
 // Never log plaintext passwords. Redact password fields from request bodies
 // before they reach the request log.
-const REDACT_FIELDS = ["password", "confirm"];
+const REDACT_FIELDS = ["password", "confirm", "secret", "otpsecret"];
 const redactBody = (body: any) => {
   if (!body || typeof body !== "object") return body;
   const copy: any = { ...body };