Privacy-safe Phoenix request logging backed by redacted Plug assigns.

This handler is an opt-in replacement for Phoenix's default telemetry logger. It never reads conn.params. Instead, it logs the redacted copy produced by Obscura.Phoenix.Plug in :assign_redacted mode.

Disable Phoenix's default logger before starting this handler:

config :phoenix, :logger, false

Startup fails if a corresponding Phoenix default HTTP logger remains attached, preventing raw and sanitized request records from running together.

Place Obscura.Phoenix.Plug after Plug.Parsers and before the router:

plug Obscura.Phoenix.Plug,
  mode: :assign_redacted,
  fields: [:params]

plug MyAppWeb.Router

Then add the handler to the application supervision tree:

children = [
  {Obscura.Phoenix.Logger, assign: :obscura_redacted}
]

When the expected assign is missing, parameters are logged as [FILTERED]. Phoenix's configured :filter_parameters policy is applied as an additional safeguard. Parameter keys containing high-confidence :fast profile PII are replaced before inspection. Ambiguous bare domains are left to explicit Phoenix filter policies. Original request paths and exception reasons are intentionally omitted.