From aaa60d7d656980285c1196ecd9518580d0479786 Mon Sep 17 00:00:00 2001
From: banteg <4562643+banteg@users.noreply.github.com>
Date: Sat, 4 Jul 2026 05:19:34 +0400
Subject: [PATCH] fix(monitoring_api): redact reqwest error URLs (#9555)

Co-Authored-By: banteg <4562643+banteg@users.noreply.github.com>
---
 Cargo.lock                       |  1 +
 common/monitoring_api/Cargo.toml |  1 +
 common/monitoring_api/src/lib.rs | 49 ++++++++++++++++++++++++++++++--
 3 files changed, 48 insertions(+), 3 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 9cb2617310..416a56cd29 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -6056,6 +6056,7 @@ dependencies = [
  "health_metrics",
  "lighthouse_version",
  "metrics",
+ "pretty_reqwest_error",
  "regex",
  "reqwest",
  "sensitive_url",
diff --git a/common/monitoring_api/Cargo.toml b/common/monitoring_api/Cargo.toml
index e00b1f027b..d0fa4ff2bd 100644
--- a/common/monitoring_api/Cargo.toml
+++ b/common/monitoring_api/Cargo.toml
@@ -10,6 +10,7 @@ eth2 = { workspace = true, features = ["lighthouse"] }
 health_metrics = { workspace = true }
 lighthouse_version = { workspace = true }
 metrics = { workspace = true }
+pretty_reqwest_error = { workspace = true }
 regex = { workspace = true }
 reqwest = { workspace = true }
 sensitive_url = { workspace = true }
diff --git a/common/monitoring_api/src/lib.rs b/common/monitoring_api/src/lib.rs
index 03b93f2faa..bcc8089a38 100644
--- a/common/monitoring_api/src/lib.rs
+++ b/common/monitoring_api/src/lib.rs
@@ -5,6 +5,7 @@ use std::{path::PathBuf, time::Duration};
 use eth2::lighthouse::SystemHealth;
 use gather::{gather_beacon_metrics, gather_validator_metrics};
 use health_metrics::observe::Observe;
+use pretty_reqwest_error::PrettyReqwestError;
 use reqwest::{IntoUrl, Response};
 pub use reqwest::{StatusCode, Url};
 use sensitive_url::SensitiveUrl;
@@ -24,7 +25,7 @@ pub const TIMEOUT_DURATION: u64 = 5;
 #[derive(Debug)]
 pub enum Error {
     /// The `reqwest` client raised an error.
-    Reqwest(reqwest::Error),
+    Reqwest(PrettyReqwestError),
     /// The supplied URL is badly formatted. It should look something like `http://127.0.0.1:5052`.
     InvalidUrl(SensitiveUrl),
     SystemMetricsFailed(String),
@@ -46,6 +47,12 @@ impl std::fmt::Display for Error {
     }
 }
 
+impl From<reqwest::Error> for Error {
+    fn from(e: reqwest::Error) -> Self {
+        Error::Reqwest(e.into())
+    }
+}
+
 #[derive(Debug, Clone, Serialize, Deserialize, Default)]
 pub struct Config {
     /// Endpoint
@@ -93,8 +100,7 @@ impl MonitoringHttpClient {
             .json(body)
             .timeout(Duration::from_secs(TIMEOUT_DURATION))
             .send()
-            .await
-            .map_err(Error::Reqwest)?;
+            .await?;
         ok_or_error(response).await?;
         Ok(())
     }
@@ -213,3 +219,40 @@ async fn ok_or_error(response: Response) -> Result<Response, Error> {
         Err(Error::StatusCode(status))
     }
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use std::net::TcpListener;
+
+    #[tokio::test]
+    async fn reqwest_error_display_redacts_monitoring_endpoint_query() {
+        let port = TcpListener::bind("127.0.0.1:0")
+            .unwrap()
+            .local_addr()
+            .unwrap()
+            .port();
+
+        let client = MonitoringHttpClient::new(&Config {
+            monitoring_endpoint: "http://127.0.0.1/".to_string(),
+            db_path: None,
+            freezer_db_path: None,
+            update_period_secs: None,
+        })
+        .unwrap();
+        let api_key = "test-api-key";
+        let url = format!("http://127.0.0.1:{port}/api/v1/client/metrics?apikey={api_key}");
+
+        let error = client
+            .post(url, &Vec::<MonitoringMetrics>::new())
+            .await
+            .unwrap_err();
+
+        let formatted_error = error.to_string();
+
+        assert!(formatted_error.contains(&format!("http://127.0.0.1:{port}/")));
+        assert!(!formatted_error.contains("apikey"));
+        assert!(!formatted_error.contains(api_key));
+        assert!(!formatted_error.contains(&format!("apikey={api_key}")));
+    }
+}