Clean up

backend/src/life_towers/logging.py

@@ -4,6 +4,7 @@ from __future__ import annotations
 
 import time
 import uuid as _uuid_mod
+from hashlib import sha256
 
 import structlog
 from fastapi import Request, Response
@@ -26,8 +27,12 @@ def configure_logging() -> None:
     )
 
 
+def token_log_id(token: str) -> str:
+    return sha256(token.encode("utf-8")).hexdigest()[:12]
+
+
 async def request_logging_middleware(request: Request, call_next) -> Response:
-    """Log each request with method, path, status, duration_ms, user_id, request_id."""
+    """Log each request without writing bearer credentials to the log stream."""
     request_id = str(_uuid_mod.uuid4())
     structlog.contextvars.clear_contextvars()
     structlog.contextvars.bind_contextvars(request_id=request_id)
@@ -38,7 +43,7 @@ async def request_logging_middleware(request: Request, call_next) -> Response:
     if auth:
         parts = auth.split()
         if len(parts) == 2 and parts[0].lower() == "bearer":
-            user_id = parts[1]
+            user_id = token_log_id(parts[1])
 
     start = time.monotonic()
     response = await call_next(request)