PPascal Bleserfeat(proxy): add the service to the proxy metrics
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
use plain pkg module Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de> | 1 年前 | |
chore: replace interface with any | 5 个月前 | |
chore: replace interface with any | 5 个月前 | |
appauth: Add token and user (with roles) to context When successfully authenticating a user via apptoken, resolve the user's roles and add the user and the token returned by the auth service to the request context. Rely on the account_resolve middleware to add the reva token to the outgoing request as the other auth middlewares do. | 1 年前 | |
appauth: Add token and user (with roles) to context When successfully authenticating a user via apptoken, resolve the user's roles and add the user and the token returned by the auth service to the request context. Rely on the account_resolve middleware to add the reva token to the outgoing request as the other auth middlewares do. | 1 年前 | |
fix(proxy): suppress auth challenges for failed signed URLs Do not set WWW-Authenticate headers when an active signed URL authentication attempt fails. Signed URL clients cannot respond to Basic or Bearer challenges, and advertising them may trigger unintended authentication prompts. Keep returning 401 Unauthorized while preserving the existing challenge behavior for unsigned requests and disabled signed URL mechanisms. | 16 天前 | |
chore: replace interface with any | 5 个月前 | |
chore: replace interface with any | 5 个月前 | |
Adjust LDAP Schema for new name | 1 年前 | |
use plain pkg module Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de> | 1 年前 | |
Do not try to create personal spaces for lightweight or service users This fixes error logs like RR error when calling Createhome error="gateway: grpc failed with code CODE_INVALID_ARGUMENT" line=github.com/opencloud-eu/opencloud/services/proxy/pkg/middleware/create_home.go:87 service=proxy e.g. during internal requests to the data provider. | 3 个月前 | |
send all /data throught middleware Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de> | 1 个月前 | |
rename folder extensions -> services Signed-off-by: Christian Richter <crichter@owncloud.com> | 4 年前 | |
feat(proxy): add the service to the proxy metrics Improve the metrics for the proxy service. * extend the instrumenter middleware to add a label with the name of the service the request is being dispatched to * add a native Prometheus histogram that tracks the durations and also includes a label for the name of the service the request is being dispatched to, as well as a 'result' label ('success', 'client-error', 'server-error') based on the HTTP status code of the response * add per-service gauge functions to count the number of in-flight requests * add a counter for routing failures, for when an inbound request cannot be mapped to a route * extend the route.RoutingInfo struct with a service attribute, and a Service() getter * remove the 'routing_failure_count' metric, as it is redundant | 9 天前 | |
add tests for the basic auth middleware | 4 年前 | |
log jwt expired on debug level instead of error | 19 天前 | |
upd tests for auth requests middelware | 19 天前 | |
feat(proxy): configure and enforce OIDC access token audiences | 11 天前 | |
proxy: Allow mapping from an external tenant id to the internal id When the tenant id coming in via the OIDC claims doesn't match the tenant id on the provisioned user, a mapping can be configured and resolved via the reva TenantAPI service (now started as part of the "users" service). Closes: #2310 | 5 个月前 | |
refactor(policies): read the rego policies once at startup | 1 个月前 | |
refactor(policies): read the rego policies once at startup | 1 个月前 | |
feat: add userid to spans (#2536) | 5 个月前 | |
Use constant instead of repeating the "x-access-token" string over and over | 1 年前 | |
chore: replace interface with any | 5 个月前 | |
adapt tests & deepmerge Signed-off-by: Christian Richter <c.richter@opencloud.eu> | 10 个月前 | |
feat(tracing): Improve tracing for proxy middlewares Each middleware adds a new span with a useful name now. | 1 年前 | |
fix(proxy): suppress auth challenges for failed signed URLs Do not set WWW-Authenticate headers when an active signed URL authentication attempt fails. Signed URL clients cannot respond to Basic or Bearer challenges, and advertising them may trigger unintended authentication prompts. Keep returning 401 Unauthorized while preserving the existing challenge behavior for unsigned requests and disabled signed URL mechanisms. | 16 天前 | |
fix(proxy): suppress auth challenges for failed signed URLs Do not set WWW-Authenticate headers when an active signed URL authentication attempt fails. Signed URL clients cannot respond to Basic or Bearer challenges, and advertising them may trigger unintended authentication prompts. Keep returning 401 Unauthorized while preserving the existing challenge behavior for unsigned requests and disabled signed URL mechanisms. | 16 天前 | |
fix(tracing): Don't start separate span for request-id attr Just add the request id as an attribute to the span created by the 'otelhttp' middleware. | 1 年前 |