package util

import (
	"net/url"
)

// SanitizeURL removes authentication information from a URL for safe logging.
// Example: "pulsar://user:pass@host:6650" -> "pulsar://***:***@host:6650"
func SanitizeURL(rawURL string) string {
	u, err := url.Parse(rawURL)
	if err != nil {
		return "[invalid-url]"
	}
	if u.User != nil {
		u.User = url.UserPassword("***", "***")
	}
	return u.String()
}