[recorder] Sanitize tokens in recorded tests for auth

[annelo-msft]

We'll need to sanitize token values in both headers and message bodies in our tests once.

In the .NET test framework, I needed to add:

• Sanitization for tokens in headers values
• Sanitization for tokens in message bodies

For message bodies, .NET did not support sanitization of application/x-www-form-urlencoded content types. This needed to be added specially to the ACR-specific sanitizer.

I don't know how the test framework works in other languages, but this issue represents the work to investigate and implement sanitization in recorded tests so we don't check in secrets in our test recordings.

[HarshaNalluru]

Thanks for the issue @annelo-msft.
Can you point me to the PR or the code that you have added to .NET test framework for reference?

[annelo-msft]

Sure!

Here is the PR: Azure/azure-sdk-for-net#19696

You can see the ContainerRegistryRecordedTestSanitizer class I added for .NET here: https://github.com/Azure/azure-sdk-for-net/pull/19696/files?file-filters%5B%5D=.cs#diff-df9ae6fe8cf7eaf74104691a4fe7b2aeb4890d35aa6432ec4688154451429879R11

[jeremymeng]

Currently done in ACR

[jeremymeng]

I believe this has been addressed in the unified recorder?

[HarshaNalluru]

Yes 😎