mirror of
https://github.com/minio/minio.git
synced 2025-02-10 13:18:12 -05:00
9ad6012782
time.Format() is not necessary prematurely for JSON marshalling, since JSON marshalling indeed defaults to RFC3339Nano. This also ensures the 'time' is remembered until its logged and it is the same time when the 'caller' invoked 'log' functions.
104 lines
3.3 KiB
Go
104 lines
3.3 KiB
Go
// Copyright (c) 2015-2021 MinIO, Inc.
|
|
//
|
|
// This file is part of MinIO Object Storage stack
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
package audit
|
|
|
|
import (
|
|
"net/http"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/minio/minio/internal/handlers"
|
|
xhttp "github.com/minio/minio/internal/http"
|
|
)
|
|
|
|
// Version - represents the current version of audit log structure.
|
|
const Version = "1"
|
|
|
|
// Entry - audit entry logs.
|
|
type Entry struct {
|
|
Version string `json:"version"`
|
|
DeploymentID string `json:"deploymentid,omitempty"`
|
|
Time time.Time `json:"time"`
|
|
Trigger string `json:"trigger"`
|
|
API struct {
|
|
Name string `json:"name,omitempty"`
|
|
Bucket string `json:"bucket,omitempty"`
|
|
Object string `json:"object,omitempty"`
|
|
Status string `json:"status,omitempty"`
|
|
StatusCode int `json:"statusCode,omitempty"`
|
|
InputBytes int64 `json:"rx"`
|
|
OutputBytes int64 `json:"tx"`
|
|
TimeToFirstByte string `json:"timeToFirstByte,omitempty"`
|
|
TimeToResponse string `json:"timeToResponse,omitempty"`
|
|
} `json:"api"`
|
|
RemoteHost string `json:"remotehost,omitempty"`
|
|
RequestID string `json:"requestID,omitempty"`
|
|
UserAgent string `json:"userAgent,omitempty"`
|
|
ReqClaims map[string]interface{} `json:"requestClaims,omitempty"`
|
|
ReqQuery map[string]string `json:"requestQuery,omitempty"`
|
|
ReqHeader map[string]string `json:"requestHeader,omitempty"`
|
|
RespHeader map[string]string `json:"responseHeader,omitempty"`
|
|
Tags map[string]interface{} `json:"tags,omitempty"`
|
|
}
|
|
|
|
// NewEntry - constructs an audit entry object with some fields filled
|
|
func NewEntry(deploymentID string) Entry {
|
|
return Entry{
|
|
Version: Version,
|
|
DeploymentID: deploymentID,
|
|
Time: time.Now().UTC(),
|
|
}
|
|
}
|
|
|
|
// ToEntry - constructs an audit entry from a http request
|
|
func ToEntry(w http.ResponseWriter, r *http.Request, reqClaims map[string]interface{}, deploymentID string) Entry {
|
|
|
|
entry := NewEntry(deploymentID)
|
|
|
|
entry.RemoteHost = handlers.GetSourceIP(r)
|
|
entry.UserAgent = r.UserAgent()
|
|
entry.ReqClaims = reqClaims
|
|
|
|
q := r.URL.Query()
|
|
reqQuery := make(map[string]string, len(q))
|
|
for k, v := range q {
|
|
reqQuery[k] = strings.Join(v, ",")
|
|
}
|
|
entry.ReqQuery = reqQuery
|
|
|
|
reqHeader := make(map[string]string, len(r.Header))
|
|
for k, v := range r.Header {
|
|
reqHeader[k] = strings.Join(v, ",")
|
|
}
|
|
entry.ReqHeader = reqHeader
|
|
|
|
wh := w.Header()
|
|
entry.RequestID = wh.Get(xhttp.AmzRequestID)
|
|
respHeader := make(map[string]string, len(wh))
|
|
for k, v := range wh {
|
|
respHeader[k] = strings.Join(v, ",")
|
|
}
|
|
entry.RespHeader = respHeader
|
|
|
|
if etag := respHeader[xhttp.ETag]; etag != "" {
|
|
respHeader[xhttp.ETag] = strings.Trim(etag, `"`)
|
|
}
|
|
|
|
return entry
|
|
}
|