Add log request body example

[naseemkullah]

Adds an example for a common use case of wanting the request body logged.

[naseemkullah]

cc @mcollina

[mcollina]

LGTM

[mcollina]

I think we should note that including body in the logs can cause security risks and have private user information (such as password and other GDPR-protected data) logged and persisted in long-term storage.

[naseemkullah]

Updated as such.

[davidmarkclements]

well written, sorry can we also add that logging the request bodies can also significantly affect performance.

We might also want to include an example of using the redact API on a request body

[naseemkullah]

Yes and yes.

I am a little unfamiliar about the performance consequences apart from spitting out more bytes in theory reduces performance.
I mean if the body is huge, I could see why. Is there a way to measure this accurately? e.g. How much does an extra character slow down a request?

Showing how to redact in case you want to log the body but there is sensitive data? This would be great but a little beyond me, could you provide a snippet?

[mcollina]

Yes, including more bytes slows down throughput. I don't have any specific data, because it depends on where you are sending the data to, and how fast that destination is.

As for log redaction, you can find it documented at http://getpino.io/#/docs/redaction.

[naseemkullah]

Changes applied.

[mcollina]

lgtm

[mcollina]

Good work, thanks!

[naseemkullah]

My pleasure!

[blairliu509]

How to log response body?