mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-14 20:08:02 +00:00
681541f41b
adds possibilities to cap authenticated requests and execution seconds of actions on a defined intervall
56 lines
1.5 KiB
Go
56 lines
1.5 KiB
Go
package middleware
|
|
|
|
import (
|
|
"context"
|
|
"time"
|
|
|
|
"google.golang.org/grpc"
|
|
"google.golang.org/grpc/metadata"
|
|
"google.golang.org/grpc/status"
|
|
|
|
"github.com/zitadel/zitadel/internal/api/authz"
|
|
"github.com/zitadel/zitadel/internal/logstore"
|
|
"github.com/zitadel/zitadel/internal/logstore/emitters/access"
|
|
"github.com/zitadel/zitadel/internal/telemetry/tracing"
|
|
)
|
|
|
|
func AccessStorageInterceptor(svc *logstore.Service) grpc.UnaryServerInterceptor {
|
|
return func(ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (_ interface{}, err error) {
|
|
if !svc.Enabled() {
|
|
return handler(ctx, req)
|
|
}
|
|
|
|
reqMd, _ := metadata.FromIncomingContext(ctx)
|
|
|
|
resp, handlerErr := handler(ctx, req)
|
|
|
|
interceptorCtx, span := tracing.NewServerInterceptorSpan(ctx)
|
|
defer func() { span.EndWithError(err) }()
|
|
|
|
var respStatus uint32
|
|
grpcStatus, ok := status.FromError(handlerErr)
|
|
if ok {
|
|
respStatus = uint32(grpcStatus.Code())
|
|
}
|
|
|
|
resMd, _ := metadata.FromOutgoingContext(ctx)
|
|
instance := authz.GetInstance(ctx)
|
|
|
|
record := &access.Record{
|
|
LogDate: time.Now(),
|
|
Protocol: access.GRPC,
|
|
RequestURL: info.FullMethod,
|
|
ResponseStatus: respStatus,
|
|
RequestHeaders: reqMd,
|
|
ResponseHeaders: resMd,
|
|
InstanceID: instance.InstanceID(),
|
|
ProjectID: instance.ProjectID(),
|
|
RequestedDomain: instance.RequestedDomain(),
|
|
RequestedHost: instance.RequestedHost(),
|
|
}
|
|
|
|
svc.Handle(interceptorCtx, record)
|
|
return resp, handlerErr
|
|
}
|
|
}
|