mask

fun mask(value: String, visibleStart: Int = 0, visibleEnd: Int = 4, maskChar: Char = 'X'): String(source)

Masks a UAN for PII-safe display.

UAN is employment PII — always mask before displaying in UI or logging.

Masking operates on the raw input string (not normalised). This is intentional — the masker is a display utility that works character-by-character on whatever string it receives. Callers who want to mask a normalised UAN should call format first: UAN.mask(UAN.format(value)).

Default (visibleStart=0, visibleEnd=4, maskChar='X'): Shows last 4 characters, masks the rest. "101234567890""XXXXXXXX7890" (last 4: "7890")

Edge cases (all safe — never throws):

  • Empty input → returns "".

  • visibleStart + visibleEnd >= value.length → entire string returned unmasked (overlap rule).

  • Non-normalised input (spaces, hyphens) → masking applied character-by-character on the raw string. No normalisation is performed.

Return

Masked string. Never throws — display-safe by contract.

Parameters

value

Raw UAN string to mask. No normalisation is applied.

visibleStart

Number of leading characters to show unmasked. Default: 0.

visibleEnd

Number of trailing characters to show unmasked. Default: 4.

maskChar

Character to replace masked positions. Default: 'X'.

Samples

check(UAN.mask("100123456789") == "XXXXXXXX6789")