125 lines
3.0 KiB
Go
125 lines
3.0 KiB
Go
package aduit
|
||
|
||
import (
|
||
"context"
|
||
|
||
"github.com/emicklei/go-restful/v3"
|
||
"github.com/infraboard/mcube/v2/ioc"
|
||
"github.com/infraboard/mcube/v2/ioc/config/application"
|
||
"github.com/infraboard/mcube/v2/ioc/config/gorestful"
|
||
ioc_kafka "github.com/infraboard/mcube/v2/ioc/config/kafka"
|
||
"github.com/infraboard/mcube/v2/ioc/config/log"
|
||
"github.com/infraboard/modules/iam/apps/endpoint"
|
||
"github.com/infraboard/modules/iam/apps/token"
|
||
"github.com/rs/zerolog"
|
||
"github.com/segmentio/kafka-go"
|
||
"gitlab.com/go-course-project/go17/devcloud-mini/maudit/apps/event"
|
||
)
|
||
|
||
func init() {
|
||
ioc.Config().Registry(&auditor{
|
||
Topic: "maudit_new",
|
||
})
|
||
}
|
||
|
||
func Audit(v bool) (string, bool) {
|
||
return event.META_AUDIT_KEY, v
|
||
}
|
||
|
||
type auditor struct {
|
||
ioc.ObjectImpl
|
||
|
||
log *zerolog.Logger
|
||
|
||
// 当前这个消费者 配置的topic
|
||
Topic string `toml:"topic" json:"topic" yaml:"topic" env:"TOPIC"`
|
||
//
|
||
wirter *kafka.Writer
|
||
}
|
||
|
||
func (a *auditor) Name() string {
|
||
return "auditor"
|
||
}
|
||
|
||
func (a *auditor) Init() error {
|
||
a.log = log.Sub("mauditor")
|
||
a.log.Debug().Msgf("maduit topic name: %s", a.Topic)
|
||
a.wirter = ioc_kafka.Producer(a.Topic)
|
||
|
||
// 添加到中间件, 加到Root Router里面
|
||
ws := gorestful.RootRouter()
|
||
ws.Filter(a.Audit())
|
||
return nil
|
||
}
|
||
|
||
// 补充中间件函数逻辑
|
||
func (a *auditor) Audit() restful.FilterFunction {
|
||
return func(r1 *restful.Request, r2 *restful.Response, fc *restful.FilterChain) {
|
||
sr := r1.SelectedRoute()
|
||
md := NewMetaData(sr.Metadata())
|
||
|
||
// 开关打开，则开启审计
|
||
if md.GetBool(event.META_AUDIT_KEY) {
|
||
|
||
// 获取当前是否需要审计
|
||
e := event.NewEvent()
|
||
|
||
// 用户信息
|
||
tk := token.GetTokenFromCtx(r1.Request.Context())
|
||
if tk != nil {
|
||
e.Who = tk.UserName
|
||
e.Extras["namespace"] = tk.NamespaceName
|
||
}
|
||
|
||
// ioc 里面获取当前应用的名称
|
||
e.Service = application.Get().AppName
|
||
e.ResourceType = md.GetString(endpoint.META_RESOURCE_KEY)
|
||
e.Action = md.GetString(endpoint.META_ACTION_KEY)
|
||
|
||
// {id} /:id
|
||
e.ResourceId = r1.PathParameter("id")
|
||
e.UserAgent = r1.Request.UserAgent()
|
||
e.Extras["method"] = sr.Method()
|
||
e.Extras["path"] = sr.Path()
|
||
e.Extras["operation"] = sr.Operation()
|
||
|
||
// 补充处理后的数据
|
||
e.StatusCode = r2.StatusCode()
|
||
// 发送给topic, 使用这个中间件的使用者，需要配置kafka
|
||
err := a.wirter.WriteMessages(context.Background(), e.ToKafkaMessage())
|
||
if err != nil {
|
||
a.log.Error().Msgf("send message error, %s", err)
|
||
} else {
|
||
a.log.Debug().Msgf("send audit event ok, who: %s, resource: %s, action: %s", e.Who, e.ResourceType, e.Action)
|
||
}
|
||
}
|
||
|
||
// 路有给后续逻辑
|
||
fc.ProcessFilter(r1, r2)
|
||
}
|
||
}
|
||
|
||
func NewMetaData(data map[string]any) *MetaData {
|
||
return &MetaData{
|
||
data: data,
|
||
}
|
||
}
|
||
|
||
type MetaData struct {
|
||
data map[string]any
|
||
}
|
||
|
||
func (m *MetaData) GetString(key string) string {
|
||
if v, ok := m.data[key]; ok {
|
||
return v.(string)
|
||
}
|
||
return ""
|
||
}
|
||
|
||
func (m *MetaData) GetBool(key string) bool {
|
||
if v, ok := m.data[key]; ok {
|
||
return v.(bool)
|
||
}
|
||
return false
|
||
}
|