Merge pull request #156 from IABTechLab/sas-UID2-6435-logging-routes-etc

Sas UI d2 6435 logging routes etc

Author: ssundahlTTD

tools/hashing-tool/default.conf

@@ -9,6 +9,7 @@ server {
     }
 
     location / {
+        access_log off;
         root /usr/share/nginx/html;
         index index.html;
         try_files $uri $uri/ =404;

tools/reverse-proxy/docker-entrypoint.sh

@@ -6,12 +6,7 @@ DOMAIN=${DOMAIN:-sample-dev.com}
 
 # Check if SSL certificates exist
 if [ ! -f /etc/nginx/certs/cert.crt ] || [ ! -f /etc/nginx/certs/cert.key ]; then
-  echo "WARNING: SSL certificates not found at /etc/nginx/certs/"
-  echo "HTTPS will not work until you generate certificates."
-  echo "Run 'npm install && npm run createCA' in the project root to generate certificates."
-  echo "Then trust the CA certificate (ca/ca.crt) in your system/browser."
-  echo ""
-  echo "Creating self-signed fallback certificates for startup..."
+  echo "WARNING: SSL certs missing - creating temporary self-signed fallback"
   # Create fallback self-signed certificate so nginx can start
   mkdir -p /etc/nginx/certs
   openssl req -x509 -nodes -days 1 -newkey rsa:2048 \

tools/reverse-proxy/nginx.conf

@@ -1,7 +1,7 @@
 user  nginx;
 worker_processes  auto;
 
-error_log  /var/log/nginx/error.log notice;
+error_log  /var/log/nginx/error.log warn;
 pid        /var/run/nginx.pid;
 
 events {
@@ -12,28 +12,22 @@ http {
     include       /etc/nginx/mime.types;
     default_type  application/octet-stream;
 
-    log_format  path_status  '$remote_addr - $remote_user [$time_local] $request $status';
+    # Log format for errors (4xx and 5xx) - excludes successful requests
+    # Dimensions: IP, timestamp, method, request URL (includes query string), status, referrer
+    log_format  errors_only  '$remote_addr [$time_local] $request_method "$request_uri" $status "$http_referer"';
 
-    # Debug log format - shows Host header details for troubleshooting routing issues
-    # To use, switch access_log below to use debug_routing instead of path_status
-    log_format  debug_routing  '$remote_addr [$time_local] "$request" '
-                               'status=$status '
-                               'host="$host" '
-                               'http_host="$http_host" '
-                               'server_name="$server_name" '
-                               'scheme=$scheme '
-                               'x_forwarded_host="$http_x_forwarded_host" '
-                               'x_forwarded_proto="$http_x_forwarded_proto"';
+    # Map to conditionally log only 4xx and 5xx errors
+    map $status $log_errors_only {
+        ~^[45]  1;
+        default 0;
+    }
 
-    access_log  /var/log/nginx/access.log  path_status;
+    access_log  /var/log/nginx/access.log  errors_only  if=$log_errors_only;
 
     sendfile        on;
-    #tcp_nopush     on;
 
     keepalive_timeout  65;
 
-    #gzip  on;
-
     # Increase server_names_hash_bucket_size to handle long server names
     # Default is 64, but we have many long server_name entries
     server_names_hash_bucket_size 128;

web-integrations/google-secure-signals/client-side/default.conf

@@ -9,6 +9,7 @@ server {
     }
 
     location / {
+        access_log off;
         root /usr/share/nginx/html;
         index index.html;
         try_files $uri $uri/ =404;

web-integrations/google-secure-signals/react-client-side/server.js

@@ -103,7 +103,6 @@ if (fs.existsSync(buildPath)) {
 app.get('*', (req, res, next) => {
   // Don't serve index.html for /ops/* routes
   if (req.path.startsWith('/ops/')) {
-    console.log('Catch-all skipping /ops/ route:', req.path);
     return next();
   }
   serveIndexHtml(req, res);

web-integrations/google-secure-signals/server-side/server.js

@@ -266,7 +266,7 @@ app.post('/login', async (req, res) => {
       });
     }
   } catch (error) {
-    console.error('Token generation failed:', error);
+    console.error('Token generation failed:', error.message);
     res.render('index', {
       identity: null,
       isOptout: false,

web-integrations/javascript-sdk/client-side/default.conf

@@ -9,6 +9,7 @@ server {
     }
 
     location / {
+        access_log off;
         root /usr/share/nginx/html;
         index index.html;
         try_files $uri $uri/ =404;

web-integrations/javascript-sdk/react-client-side/server.js

@@ -96,7 +96,6 @@ if (fs.existsSync(buildPath)) {
 app.get('*', (req, res, next) => {
   // Don't serve index.html for /ops/* routes
   if (req.path.startsWith('/ops/')) {
-    console.log('Catch-all skipping /ops/ route:', req.path);
     return next();
   }
   serveIndexHtml(req, res);

web-integrations/prebid-integrations/client-side-deferred/default.conf

@@ -9,6 +9,7 @@ server {
     }
 
     location / {
+        access_log off;
         root /usr/share/nginx/html;
         index index.html;
         try_files $uri $uri/ =404;

web-integrations/prebid-integrations/client-side/default.conf

@@ -9,6 +9,7 @@ server {
     }
 
     location / {
+        access_log off;
         root /usr/share/nginx/html;
         index index.html;
         try_files $uri $uri/ =404;