Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: fixing audit logs for websocket connections #8048

Merged
merged 8 commits into from
Sep 24, 2021

Conversation

aman-bansal
Copy link
Contributor

@aman-bansal aman-bansal commented Sep 21, 2021

Audits were made to operate as a middleware for all the requests over the 8080 port of Dgraph alpha. This works great for grpc and http requests but not for graphQL subscriptions over websockets. websocket connections works in different way. They start as normal Http connection and then gets upgraded to the websocket connection. Till the upgrade is over, there is no transfer of metadata and headers across the network. This makes auditing impossible at the middleware layer for websocket connections.

This PR separates out the audit for websockets connection to the http.go#subscriber which will handle the auditing in the right manner.


This change is Reviewable

@github-actions github-actions bot added area/enterprise Related to proprietary features area/graphql Issues related to GraphQL support on Dgraph. labels Sep 21, 2021
Copy link
Contributor

@NamanJain8 NamanJain8 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks good to me. Make sure to test it out.

x/jwt_helper.go Show resolved Hide resolved
ee/audit/interceptor_ee.go Show resolved Hide resolved
@aman-bansal aman-bansal force-pushed the aman/fix_websocket_audit branch from 12b4d6a to e16170d Compare September 24, 2021 08:46
@aman-bansal aman-bansal merged commit 9792506 into master Sep 24, 2021
@aman-bansal aman-bansal deleted the aman/fix_websocket_audit branch September 24, 2021 09:16
aman-bansal added a commit that referenced this pull request Sep 24, 2021
* fix: fixing audit logs for websocket connections
aman-bansal added a commit that referenced this pull request Sep 24, 2021
* fix: fixing audit logs for websocket connections
all-seeing-code pushed a commit that referenced this pull request Jan 4, 2023
* fix: fixing audit logs for websocket connections

(cherry picked from commit 3f8cff9)
all-seeing-code pushed a commit that referenced this pull request Jan 19, 2023
* fix: fixing audit logs for websocket connections

(cherry picked from commit 3f8cff9)
all-seeing-code pushed a commit that referenced this pull request Jan 20, 2023
* fix: fixing audit logs for websocket connections

(cherry picked from commit 3f8cff9)
all-seeing-code added a commit that referenced this pull request Jan 23, 2023
Fix audit logs for requests over websocket.
(cherry picked from commit 3f8cff9)

Co-authored-by: aman bansal <[email protected]>
all-seeing-code added a commit that referenced this pull request Jan 24, 2023
all-seeing-code pushed a commit that referenced this pull request Jan 24, 2023
* fix: fixing audit logs for websocket connections

(cherry picked from commit 3f8cff9)
all-seeing-code added a commit that referenced this pull request Jan 24, 2023
Fixing audit logs for websocket connections

(cherry picked from commit 3f8cff9)

Co-authored-by: aman bansal <[email protected]>
all-seeing-code added a commit that referenced this pull request Feb 8, 2023
Fixing audit logs for websocket connections

(cherry picked from commit 3f8cff9)

Co-authored-by: aman bansal <[email protected]>
all-seeing-code added a commit that referenced this pull request Feb 8, 2023
Fix audit logs for requests over websocket.
(cherry picked from commit 3f8cff9)

Co-authored-by: aman bansal <[email protected]>
all-seeing-code added a commit that referenced this pull request Feb 8, 2023
Fixing audit logs for websocket connections

(cherry picked from commit 3f8cff9)

Co-authored-by: aman bansal <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/enterprise Related to proprietary features area/graphql Issues related to GraphQL support on Dgraph.
Development

Successfully merging this pull request may close these issues.

2 participants