feat(audit): sanitize stored upstream responses

backend/internal/audit/sanitize_test.go

@@ -0,0 +1,56 @@
+package audit
+
+import (
+	"encoding/json"
+	"testing"
+)
+
+func TestSanitizeResponse(t *testing.T) {
+	raw := []byte(`{
+		"data": {
+			"card": "6037997512345678",
+			"iban": "IR820540102680020817909002"
+		},
+		"meta": {"isSuccess": true}
+	}`)
+
+	got := SanitizeResponse(raw, "603799******5678")
+	if len(got) == 0 {
+		t.Fatal("SanitizeResponse() returned an empty response")
+	}
+
+	var decoded map[string]any
+	if err := json.Unmarshal(got, &decoded); err != nil {
+		t.Fatalf("unmarshal sanitized response: %v", err)
+	}
+
+	data, ok := decoded["data"].(map[string]any)
+	if !ok {
+		t.Fatal("sanitized response does not contain data object")
+	}
+
+	if gotCard := data["card"]; gotCard != "603799******5678" {
+		t.Errorf("sanitized card = %v, want masked card", gotCard)
+	}
+
+	if gotIBAN := data["iban"]; gotIBAN != "IR820540102680020817909002" {
+		t.Errorf("sanitized iban = %v, want original iban", gotIBAN)
+	}
+}
+
+func TestSanitizeResponseRejectsInvalidJSON(t *testing.T) {
+	if got := SanitizeResponse([]byte(`not-json`), "603799******5678"); got != nil {
+		t.Errorf("SanitizeResponse() = %q, want nil", got)
+	}
+}
+
+func TestSanitizeResponseRedactsCardWhenMaskIsEmpty(t *testing.T) {
+	got := SanitizeResponse(
+		[]byte(`{"card":"6037997512345678"}`),
+		"",
+	)
+
+	if string(got) != `{"card":"[redacted]"}` {
+		t.Errorf("SanitizeResponse() = %s, want redacted card", got)
+	}
+}