SENSITIVE_KEYS = {
    "password",
    "token",
    "access_token",
    "refresh_token",
    "authorization",
}

def mask_sensitive(data):
    if isinstance(data, dict):
        return {
            k: (
                "***"
                if k.lower() in SENSITIVE_KEYS
                else mask_sensitive(v)
            )
            for k, v in data.items()
        }

    if isinstance(data, list):
        return [mask_sensitive(v) for v in data]

    return data