A Phoenix request can have a correctly redacted assign while the default telemetry logger still reads the original conn.params. This article explains Obscura’s opt-in logging boundary, how controllers retain original data while logs receive only a sanitized representation, and how the integration handles routes, failures, and work budgets without falling back to raw request data.

https://hfiguera.github.io/obscura/blog/privacy-safe-phoenix-request-logging/