mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-15 12:27:59 +00:00
142 lines
3.3 KiB
Go
142 lines
3.3 KiB
Go
package activity
|
|
|
|
import (
|
|
"context"
|
|
"strconv"
|
|
|
|
"github.com/grpc-ecosystem/grpc-gateway/v2/runtime"
|
|
"github.com/zitadel/logging"
|
|
|
|
"github.com/zitadel/zitadel/internal/api/authz"
|
|
http_utils "github.com/zitadel/zitadel/internal/api/http"
|
|
"github.com/zitadel/zitadel/internal/api/info"
|
|
"github.com/zitadel/zitadel/internal/eventstore"
|
|
"github.com/zitadel/zitadel/internal/repository/user"
|
|
)
|
|
|
|
const (
|
|
Activity = "activity"
|
|
|
|
PathKey = "zitadel-activity-path"
|
|
RequestMethodKey = "zitadel-activity-request-method"
|
|
)
|
|
|
|
type TriggerMethod int
|
|
|
|
const (
|
|
Unspecified TriggerMethod = iota
|
|
ResourceAPI
|
|
OIDCAccessToken
|
|
OIDCRefreshToken
|
|
SessionAPI
|
|
SAMLResponse
|
|
)
|
|
|
|
func (t TriggerMethod) String() string {
|
|
switch t {
|
|
case Unspecified:
|
|
return "unspecified"
|
|
case ResourceAPI:
|
|
return "resourceAPI"
|
|
case OIDCRefreshToken:
|
|
return "refreshToken"
|
|
case OIDCAccessToken:
|
|
return "accessToken"
|
|
case SessionAPI:
|
|
return "sessionAPI"
|
|
case SAMLResponse:
|
|
return "samlResponse"
|
|
default:
|
|
return "unknown"
|
|
}
|
|
}
|
|
|
|
// Trigger is used to log a specific events for a user (e.g. session or oidc token creation)
|
|
func Trigger(ctx context.Context, orgID, userID string, trigger TriggerMethod, reducer func(ctx context.Context, r eventstore.QueryReducer) error) {
|
|
if orgID == "" && userID != "" {
|
|
orgID = getOrgOfUser(ctx, userID, reducer)
|
|
}
|
|
ai := info.ActivityInfoFromContext(ctx)
|
|
triggerLog(
|
|
authz.GetInstance(ctx).InstanceID(),
|
|
orgID,
|
|
userID,
|
|
http_utils.ComposedOrigin(ctx),
|
|
trigger,
|
|
ai.Method,
|
|
ai.Path,
|
|
ai.RequestMethod,
|
|
"",
|
|
"",
|
|
authz.GetCtxData(ctx).SystemMemberships != nil,
|
|
)
|
|
}
|
|
|
|
func TriggerGRPCWithContext(ctx context.Context, trigger TriggerMethod) {
|
|
ai := info.ActivityInfoFromContext(ctx)
|
|
triggerLog(
|
|
authz.GetInstance(ctx).InstanceID(),
|
|
authz.GetCtxData(ctx).OrgID,
|
|
authz.GetCtxData(ctx).UserID,
|
|
http_utils.ComposedOrigin(ctx),
|
|
trigger,
|
|
ai.Method,
|
|
ai.Path,
|
|
ai.RequestMethod,
|
|
strconv.Itoa(int(ai.GRPCStatus)),
|
|
strconv.Itoa(runtime.HTTPStatusFromCode(ai.GRPCStatus)),
|
|
authz.GetCtxData(ctx).SystemMemberships != nil,
|
|
)
|
|
}
|
|
|
|
func triggerLog(instanceID, orgID, userID, domain string, trigger TriggerMethod, method, path, requestMethod, grpcStatus, httpStatus string, isSystemUser bool) {
|
|
logging.WithFields(
|
|
"instance", instanceID,
|
|
"org", orgID,
|
|
"user", userID,
|
|
"domain", domain,
|
|
"trigger", trigger.String(),
|
|
"method", method,
|
|
"path", path,
|
|
"grpcStatus", grpcStatus,
|
|
"httpStatus", httpStatus,
|
|
"requestMethod", requestMethod,
|
|
"isSystemUser", isSystemUser,
|
|
).Info(Activity)
|
|
}
|
|
|
|
func getOrgOfUser(ctx context.Context, userID string, reducer func(ctx context.Context, r eventstore.QueryReducer) error) string {
|
|
org := &orgIDOfUser{userID: userID}
|
|
err := reducer(ctx, org)
|
|
if err != nil {
|
|
logging.WithError(err).Error("could not get org id of user for trigger log")
|
|
return ""
|
|
}
|
|
return org.orgID
|
|
}
|
|
|
|
type orgIDOfUser struct {
|
|
eventstore.WriteModel
|
|
|
|
userID string
|
|
orgID string
|
|
}
|
|
|
|
func (u *orgIDOfUser) Query() *eventstore.SearchQueryBuilder {
|
|
return eventstore.NewSearchQueryBuilder(eventstore.ColumnsEvent).
|
|
OrderDesc().
|
|
Limit(1).
|
|
AddQuery().
|
|
AggregateTypes(user.AggregateType).
|
|
AggregateIDs(u.userID).
|
|
Builder()
|
|
}
|
|
|
|
func (u *orgIDOfUser) Reduce() error {
|
|
if len(u.Events) == 0 {
|
|
return nil
|
|
}
|
|
u.orgID = u.Events[0].Aggregate().ResourceOwner
|
|
return nil
|
|
}
|