[API Proposal]: System.Text.Json modify property value in runtime

[thangnn91]

Background and motivation

I'm using Audit.Net library for my project.
Default, in their newest version, they use System.Text.Json to Mongo log
I looking up many sources, but I can't resolve my problem
I want to dynamically replace property value while Serialize object (both clear type or anonymous type) because of security issue
Eg:

public class LoginModel
{
    public string User { get; set; }
     public string Password { get; set; }
}`

var serializerOptions = new JsonSerializerOptions
{
     Converters = { //custom serialize object here}
};
var loginModel = new LoginModel {
   User ="test",
   Password = "test"
};

string  loginJson = JsonSerializer.Serialize(loginModel, serializerOptions);

My expexted result is: {"User":"test","Password":"**********"}

With Audit.Net previous version, I easily do it in Newtonsoft.Json by using a ContractResolver
Here is my custom ContractResolver class:

public class DynamicContractResolver : DefaultContractResolver
    {
        private readonly string[] props;

        public DynamicContractResolver(params string[] prop)
        {
            this.props = prop;
        }

        protected override JsonProperty CreateProperty(MemberInfo member, MemberSerialization memberSerialization)
        {
            var property = base.CreateProperty(member, memberSerialization);
            PropertyInfo propertyInfo = member as PropertyInfo;

            if (propertyInfo == null)
            {
                return property;
            }
            if (property.PropertyType.IsArray || property.PropertyType.Namespace == "Google.Protobuf.Collections")
                property.Ignored = true;
            else if (propertyInfo.CanWrite && this.props.Contains(property.PropertyName))
            {
                property.ValueProvider = new ReplaveValueProvider(propertyInfo, this.props);
            }
            return property;
        }

    }
    public class ReplaveValueProvider : IValueProvider
    {
        readonly PropertyInfo _MemberInfo;
        readonly string[] _prop_rep;
        public ReplaveValueProvider(PropertyInfo memberInfo, string[] prop_rep)
        {
            _MemberInfo = memberInfo;
            _prop_rep = prop_rep;
        }
        public object GetValue(object target)
        {
            object result = _MemberInfo.GetValue(target);
            if (result != null && _MemberInfo.PropertyType == typeof(string))
            {
                var valueText = result.ToString();
                if (!string.IsNullOrEmpty(valueText) && valueText.Contains("{") && valueText.Contains("}"))
                {
                    JObject jObj;
                    if (Helper.TryParseJSON(result.ToString(), out jObj))
                    {
                        foreach (var p in _prop_rep)
                        {
                            if (jObj.ContainsKey(p))
                                jObj[p] = "*********";
                        }
                        result = jObj.ToString(Formatting.None);
                        return result;
                    }
                }
                result = "*********";
            }
            else if (_MemberInfo.PropertyType == typeof(int) || _MemberInfo.PropertyType == typeof(long)) result = 0;
            return result;

        }

        public void SetValue(object target, object value)
        {
            _MemberInfo.SetValue(target, value);
        }
    }

Add custom contract to JsonSerializerSettings

var jsonSerializerSettings = new JsonSerializerSettings()
                {
                    Converters = new List<JsonConverter>() { new JavaScriptDateTimeConverter() },
                    DateFormatString = "dd/MM/yyyy HH:mm:ss.fff",
                    ContractResolver = new DynamicContractResolver(sensitiveDataJson.ToArray())
                }));

Hope for your suggestions!

API Proposal

System.Text.Json.JsonSerializerOptions

API Usage

System.Text.Json.JsonSerializer.Serialize(object, serializerOptions);

Risks

No response

[ghost]

Tagging subscribers to this area: @eiriktsarpalis, @layomia
See info in area-owners.md if you want to be subscribed.

Issue Details

---

Background and motivation

I'm using Audit.Net library for my project.
Default, in their newest version, they use System.Text.Json to Mongo log
I looking up many sources, but I can't resolve my problem
I want to dynamically replace property value while Serialize object (both clear type or anonymous type) because of security issue
Eg:

public class LoginModel
{
    public string User { get; set; }
     public string Password { get; set; }
}`

var serializerOptions = new JsonSerializerOptions
{
     Converters = { //custom serialize object here}
};
var loginModel = new LoginModel {
   User ="test",
   Password = "test"
};

string  loginJson = JsonSerializer.Serialize(loginModel, serializerOptions);

My expexted result is: {"User":"test","Password":"**********"}

With Audit.Net previous version, I easily do it in Newtonsoft.Json by using a ContractResolver
Here is my custom ContractResolver class:

public class DynamicContractResolver : DefaultContractResolver
    {
        private readonly string[] props;

        public DynamicContractResolver(params string[] prop)
        {
            this.props = prop;
        }

        protected override JsonProperty CreateProperty(MemberInfo member, MemberSerialization memberSerialization)
        {
            var property = base.CreateProperty(member, memberSerialization);
            PropertyInfo propertyInfo = member as PropertyInfo;

            if (propertyInfo == null)
            {
                return property;
            }
            if (property.PropertyType.IsArray || property.PropertyType.Namespace == "Google.Protobuf.Collections")
                property.Ignored = true;
            else if (propertyInfo.CanWrite && this.props.Contains(property.PropertyName))
            {
                property.ValueProvider = new ReplaveValueProvider(propertyInfo, this.props);
            }
            return property;
        }

    }
    public class ReplaveValueProvider : IValueProvider
    {
        readonly PropertyInfo _MemberInfo;
        readonly string[] _prop_rep;
        public ReplaveValueProvider(PropertyInfo memberInfo, string[] prop_rep)
        {
            _MemberInfo = memberInfo;
            _prop_rep = prop_rep;
        }
        public object GetValue(object target)
        {
            object result = _MemberInfo.GetValue(target);
            if (result != null && _MemberInfo.PropertyType == typeof(string))
            {
                var valueText = result.ToString();
                if (!string.IsNullOrEmpty(valueText) && valueText.Contains("{") && valueText.Contains("}"))
                {
                    JObject jObj;
                    if (Helper.TryParseJSON(result.ToString(), out jObj))
                    {
                        foreach (var p in _prop_rep)
                        {
                            if (jObj.ContainsKey(p))
                                jObj[p] = "*********";
                        }
                        result = jObj.ToString(Formatting.None);
                        return result;
                    }
                }
                result = "*********";
            }
            else if (_MemberInfo.PropertyType == typeof(int) || _MemberInfo.PropertyType == typeof(long)) result = 0;
            return result;

        }

        public void SetValue(object target, object value)
        {
            _MemberInfo.SetValue(target, value);
        }
    }

Add custom contract to JsonSerializerSettings

var jsonSerializerSettings = new JsonSerializerSettings()
                {
                    Converters = new List<JsonConverter>() { new JavaScriptDateTimeConverter() },
                    DateFormatString = "dd/MM/yyyy HH:mm:ss.fff",
                    ContractResolver = new DynamicContractResolver(sensitiveDataJson.ToArray())
                }));

Hope for your suggestions!

API Proposal

System.Text.Json.JsonSerializerOptions

API Usage

System.Text.Json.JsonSerializer.Serialize(object, serializerOptions);

Risks

No response

Author:	thangnn91
Assignees:	-
Labels:	api-suggestion, area-System.Text.Json, untriaged
Milestone:	-

[huoyaoyuan]

#36785 #31257

[eiriktsarpalis]

Closing as duplicate of #36785.