Redact tokens, etc. in url parameters from request logs

[minrk]

replaces ?token=abc123 with ?token=[secret] in logs to avoid logging things like auth tokens.

adapted from jupyterhub

[codecov]

Codecov Report

Base: 80.49% // Head: 80.46% // Decreases project coverage by -0.04% ⚠️

Coverage data is based on head (87c2091) compared to base (ee6c660).
Patch coverage: 66.66% of modified lines in pull request are covered.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1212      +/-   ##
==========================================
- Coverage   80.49%   80.46%   -0.04%     
==========================================
  Files          68       68              
  Lines        8117     8134      +17     
  Branches     1581     1586       +5     
==========================================
+ Hits         6534     6545      +11     
- Misses       1170     1174       +4     
- Partials      413      415       +2     

Impacted Files	Coverage Δ
jupyter_server/log.py	89.09% <66.66%> (-10.91%)	⬇️
jupyter_server/serverapp.py	79.96% <0.00%> (ø)

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report at Codecov.
📢 Do you have feedback about the report comment? Let us know in this issue.

[blink1073]

Thank you!

[blink1073]

@meeseeksdev please backport to 1.x

[lumberbot-app]

Owee, I'm MrMeeseeks, Look at me.

There seem to be a conflict, please backport manually. Here are approximate instructions:

1. Checkout backport branch and update it.

git checkout 1.x
git pull

2. Cherry pick the first parent branch of the this PR on top of the older branch:

git cherry-pick -x -m1 968c56c8c69aa545f7fe93243331fe140dac7c90

3. You will likely have some merge/cherry-pick conflict here, fix them and commit:

git commit -am 'Backport PR #1212: Redact tokens, etc. in url parameters from request logs'

4. Push to a named branch:

git push YOURFORK 1.x:auto-backport-of-pr-1212-on-1.x

5. Create a PR against branch 1.x, I would have named this PR:

"Backport PR #1212 on branch 1.x (Redact tokens, etc. in url parameters from request logs)"

And apply the correct labels and milestones.

Congratulations — you did some good work! Hopefully your backport PR will be tested by the continuous integration and merged soon!

Remember to remove the Still Needs Manual Backport label once the PR gets merged.

If these instructions are inaccurate, feel free to suggest an improvement.