mirror of
https://github.com/hanzoai/o11y.git
synced 2026-11-03 02:04:48 +00:00
4102219754
* fork: own SigNoz platform deps under hanzoai, repath imports off upstream brand
Phase 1 of the full-fork mandate: eliminate upstream-branded SigNoz modules,
own them as public hanzoai forks, and repath all imports to hanzoai paths.
Owned deps (new public hanzoai forks, module renamed to hanzoai path):
github.com/SigNoz/signoz-otel-collector v0.144.3
-> github.com/hanzoai/signoz-otel-collector v0.144.6 (module renamed)
github.com/SigNoz/clickhouse-go-mock v0.14.0
-> github.com/hanzoai/clickhouse-go-mock v0.14.1 (module renamed)
github.com/SigNoz/govaluate v0.0.0-20240203125216-988004ccc7fd
-> github.com/hanzoai/govaluate v0.1.0 (module renamed)
github.com/SigNoz/expr (replace target for github.com/expr-lang/expr)
-> github.com/hanzoai/expr v1.17.8 (upstream module path preserved,
consumed via replace exactly like the prior SigNoz/expr fork)
In-repo repath: the vendored SigNoz source tree in pkg/, ee/, cmd/ is now
self-referenced as github.com/hanzoai/o11y/... instead of
github.com/SigNoz/signoz/... (1300+ import lines across 377 files), matching
the 750 files already on the hanzoai path. Zero SigNoz-branded module
references remain in go.mod or any .go import.
Generic ecosystem libraries (golang.org/x, google.golang.org, prometheus,
opentelemetry, gin, cobra, luxfi/*, etc.) are left untouched — only the
SigNoz platform fork is owned.
Pre-existing (NOT introduced here): origin/main does not `go build ./...`
because 22 packages are imported but absent from the vendored tree; 14 of
them (roletypes, grammar, cloudintegrations, resourcefilter, integrationtypes,
metricsexplorer, metrics_explorer, times, agg_rewrite, bucket_cache,
sqlitesqlstore, sqlschema/postgressqlschema, sqlstore/postgressqlstore,
cloudintegrations/services) exist in no upstream SigNoz version and must be
vendored into hanzoai/o11y from hanzoai/signoz@770f464f to finish. This
repath is orthogonal to that gap.
* docs(LLM.md): fork boundary map + pre-existing compile-gap inventory
---------
Co-authored-by: Hanzo Dev <[email protected]>
96 lines
2.9 KiB
Go
96 lines
2.9 KiB
Go
package impersonationidentn
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
"sync"
|
|
|
|
"github.com/hanzoai/o11y/pkg/errors"
|
|
"github.com/hanzoai/o11y/pkg/factory"
|
|
"github.com/hanzoai/o11y/pkg/identn"
|
|
"github.com/hanzoai/o11y/pkg/modules/organization"
|
|
"github.com/hanzoai/o11y/pkg/modules/user"
|
|
"github.com/hanzoai/o11y/pkg/types/authtypes"
|
|
)
|
|
|
|
type provider struct {
|
|
config identn.Config
|
|
settings factory.ScopedProviderSettings
|
|
orgGetter organization.Getter
|
|
userGetter user.Getter
|
|
userConfig user.Config
|
|
|
|
mu sync.RWMutex
|
|
identity *authtypes.Identity
|
|
}
|
|
|
|
func NewFactory(orgGetter organization.Getter, userGetter user.Getter, userConfig user.Config) factory.ProviderFactory[identn.IdentN, identn.Config] {
|
|
return factory.NewProviderFactory(factory.MustNewName(authtypes.IdentNProviderImpersonation.StringValue()), func(ctx context.Context, providerSettings factory.ProviderSettings, config identn.Config) (identn.IdentN, error) {
|
|
return New(ctx, providerSettings, config, orgGetter, userGetter, userConfig)
|
|
})
|
|
}
|
|
|
|
func New(ctx context.Context, providerSettings factory.ProviderSettings, config identn.Config, orgGetter organization.Getter, userGetter user.Getter, userConfig user.Config) (identn.IdentN, error) {
|
|
settings := factory.NewScopedProviderSettings(providerSettings, "github.com/hanzoai/o11y/pkg/identn/impersonationidentn")
|
|
|
|
settings.Logger().WarnContext(ctx, "impersonation identity provider is enabled, all requests will impersonate the root user")
|
|
|
|
if !userConfig.Root.Enabled {
|
|
return nil, errors.New(errors.TypeInvalidInput, errors.CodeInvalidInput, "root user is not enabled, impersonation identity provider will not be able to resolve any identity")
|
|
}
|
|
|
|
return &provider{
|
|
config: config,
|
|
settings: settings,
|
|
orgGetter: orgGetter,
|
|
userGetter: userGetter,
|
|
userConfig: userConfig,
|
|
}, nil
|
|
}
|
|
|
|
func (provider *provider) Name() authtypes.IdentNProvider {
|
|
return authtypes.IdentNProviderImpersonation
|
|
}
|
|
|
|
func (provider *provider) Test(_ *http.Request) bool {
|
|
return true
|
|
}
|
|
|
|
func (provider *provider) GetIdentity(req *http.Request) (*authtypes.Identity, error) {
|
|
ctx := req.Context()
|
|
|
|
provider.mu.RLock()
|
|
if provider.identity != nil {
|
|
provider.mu.RUnlock()
|
|
return provider.identity, nil
|
|
}
|
|
provider.mu.RUnlock()
|
|
|
|
provider.mu.Lock()
|
|
defer provider.mu.Unlock()
|
|
|
|
// Re-check after acquiring write lock; another goroutine may have resolved it.
|
|
if provider.identity != nil {
|
|
return provider.identity, nil
|
|
}
|
|
|
|
org, _, err := provider.orgGetter.GetByIDOrName(ctx, provider.userConfig.Root.Org.ID, provider.userConfig.Root.Org.Name)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
rootUser, _, err := provider.userGetter.GetRootUserByOrgID(ctx, org.ID)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
provider.identity = authtypes.NewPrincipalUserIdentity(
|
|
rootUser.ID,
|
|
rootUser.OrgID,
|
|
rootUser.Email,
|
|
authtypes.IdentNProviderImpersonation,
|
|
)
|
|
|
|
return provider.identity, nil
|
|
}
|