Apigee Edge: Unable to set response.content value in Postclient flow.

[ashutoshcupsima]

I am trying to set response.content value from null or empty to "" using JS in post client flow before logging in the splunk. 

Not able to replace and set the value of response.content. 

Refer the below code snippet. Additionally, in the trace I see Not="" in response.content. 

JS Code:

Refer else Part.

function isValidJSON(inputContent){
    try{
        JSON.parse(inputContent);
        return true;
    }
    catch(error){
        return false;
    }
}
var responseContent = context.getVariable("response.content");
if (responseContent){
if(!isValidJSON(responseContent)){
responseContent = "'"+responseContent+"'";
context.setVariable("response.content", JSON.stringify(responseContent));
}
}
else{
context.setVariable("response.content", JSON.stringify(''));
}

Trace Screenshot:

[nmarkevich]

Hello,

It's better to do it before postclientflow (like in PostFlow->Response phase), simply because postclientflow designed to perform only logging-related functionality.

Having code execute after the client receives your proxy's response with a PostClientFlow 

---

A PostClientFlow can include the following policies only. No other policies can be used in a PostClientFlow:

• FlowCallout policy*
• MessageLogging policy
• ServiceCallout policy

---

[Hilda_Arteaga]

Hi @nmarkevich thanks for assiting @ashutoshcupsima and for sharing your expertise 

[ashutoshcupsima]

Thank you @nmarkevich for your response. 
But how can we implement masking of sensitive values before storing them in Splunk, using JavaScript to mask the response.content. 

[nmarkevich]

Hi @ashutoshcupsima,

Masking sensitive data before logging it is actually a good security practice!

A JavaScript policy in Response phase can do it.

var responseContent = JSON.parse(context.getVariable("response.content"));
if (responseContent.sensitiveData) {
    responseContent.sensitiveData = "***";
}
context.setVariable("flow.log", JSON.stringify(responseContent));

You can also use more sophisticated approaches, like masking only part of the data.