mirror of
https://github.com/hanzoai/compute.git
synced 2026-10-30 14:50:41 +00:00
zeekay
2b14fd1659
Cloud's side of this rename landed some time ago — the app is apps/compute, the env is COMPUTE_URL — and left a note saying the other half moves with the manifest that names it. This is the half that does not touch the cluster: the Go module is github.com/hanzoai/compute, the binary it builds is compute, and the image is ghcr.io/hanzoai/compute. GitHub already carries the new name. What is deliberately NOT here is the cutover. The Service universe declares is still visor, and so are visor-config, visor-kms-sync and visor-db-bucket. Pointing anything at compute.hanzo.svc before those move resolves to nothing, so they move together, in universe, not here.
62 lines
1.9 KiB
Go
62 lines
1.9 KiB
Go
// Copyright 2024 Hanzo Industries Inc. All Rights Reserved.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package routers
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/zap-proto/zip"
|
|
|
|
"github.com/hanzoai/compute/object"
|
|
"github.com/hanzoai/compute/util"
|
|
)
|
|
|
|
const recordUserIDKey = "recordUserId"
|
|
|
|
// RecordMessage is the audit-record middleware. Beego split this into a
|
|
// BeforeRouter hook (stash the acting user) and an AfterExec hook (build+persist
|
|
// the record from the response); ZAP composes both around one c.Next() — the
|
|
// before-work stashes the user id, the handler runs, then the after-work reads
|
|
// the response envelope the handler stashed and writes the audit record. Login,
|
|
// signup and get-assets are exempted from the user-id stash exactly as before.
|
|
func RecordMessage(c *zip.Ctx) error {
|
|
path := c.Path()
|
|
if path != "/v1/login" && path != "/v1/signup" && path != "/v1/assets" {
|
|
if userId := getUsername(c); userId != "" {
|
|
c.Locals(recordUserIDKey, userId)
|
|
}
|
|
}
|
|
|
|
err := c.Next()
|
|
|
|
afterRecordMessage(c)
|
|
return err
|
|
}
|
|
|
|
func afterRecordMessage(c *zip.Ctx) {
|
|
record, err := object.NewRecord(c, c.Locals(object.RecordResponseKey))
|
|
if err != nil {
|
|
fmt.Printf("AfterRecordMessage() error: %s\n", err.Error())
|
|
return
|
|
}
|
|
|
|
userId, _ := c.Locals(recordUserIDKey).(string)
|
|
if userId != "" {
|
|
record.Organization, record.User = util.GetOwnerAndNameFromId(userId)
|
|
}
|
|
|
|
object.AddRecord(record)
|
|
}
|