mirror of
https://github.com/opencloud-eu/opencloud.git
synced 2026-07-14 09:32:09 -04:00
5b2e8d13eb
* re-implement the auth-api service to authenticate Reva tokens following the OIDC Userinfo endpoint specification * pass the context where necessary and add an authenticator interface to the JMAP HTTP driver, in order to select between master authentication (which is used when GROUPWARE_JMAP_MASTER_USERNAME and GROUPWARE_JMAP_MASTER_PASSWORD are both set) and OIDC token forwarding through bearer auth * add Stalwart directory configuration "idmoidc" which uses the OpenCloud auth-api service API (/auth/) to validate the token it received as bearer auth from the Groupware backend's JMAP client, using it as an OIDC Userinfo endpoint * implement optional additional shared secret to secure the Userinfo service, as an additional path parameter
78 lines
2.0 KiB
Go
78 lines
2.0 KiB
Go
package metrics
|
|
|
|
import (
|
|
"github.com/opencloud-eu/opencloud/pkg/log"
|
|
"github.com/prometheus/client_golang/prometheus"
|
|
)
|
|
|
|
var (
|
|
// Namespace defines the namespace for the defines metrics.
|
|
Namespace = "opencloud"
|
|
|
|
// Subsystem defines the subsystem for the defines metrics.
|
|
Subsystem = "authapi"
|
|
)
|
|
|
|
// Metrics defines the available metrics of this service.
|
|
type Metrics struct {
|
|
BuildInfo *prometheus.GaugeVec
|
|
Duration *prometheus.HistogramVec
|
|
Attempts *prometheus.CounterVec
|
|
}
|
|
|
|
const (
|
|
TypeLabel = "type"
|
|
BasicType = "basic"
|
|
BearerType = "bearer"
|
|
UnsupportedType = "unsupported"
|
|
OutcomeLabel = "outcome"
|
|
AttemptSuccessOutcome = "success"
|
|
AttemptFailureOutcome = "failure"
|
|
)
|
|
|
|
func New(logger *log.Logger) (*Metrics, error) {
|
|
m := &Metrics{
|
|
BuildInfo: prometheus.NewGaugeVec(prometheus.GaugeOpts{
|
|
Namespace: Namespace,
|
|
Subsystem: Subsystem,
|
|
Name: "build_info",
|
|
Help: "Build information",
|
|
}, []string{"version"}),
|
|
Duration: prometheus.NewHistogramVec(prometheus.HistogramOpts{
|
|
Namespace: Namespace,
|
|
Subsystem: Subsystem,
|
|
Name: "authentication_duration_seconds",
|
|
Help: "Authentication processing time in seconds",
|
|
}, []string{"outcome"}),
|
|
Attempts: prometheus.NewCounterVec(prometheus.CounterOpts{
|
|
Namespace: Namespace,
|
|
Subsystem: Subsystem,
|
|
Name: "authentication_attempts_total",
|
|
Help: "How many authentication attempts were processed",
|
|
}, []string{"outcome", "type"}),
|
|
}
|
|
|
|
if err := prometheus.Register(m.BuildInfo); err != nil {
|
|
logger.Error().
|
|
Err(err).
|
|
Str("metric", "BuildInfo").
|
|
Msg("Failed to register prometheus metric")
|
|
return nil, err
|
|
}
|
|
if err := prometheus.Register(m.Duration); err != nil {
|
|
logger.Error().
|
|
Err(err).
|
|
Str("metric", "Duration").
|
|
Msg("Failed to register prometheus metric")
|
|
return nil, err
|
|
}
|
|
if err := prometheus.Register(m.Attempts); err != nil {
|
|
logger.Error().
|
|
Err(err).
|
|
Str("metric", "Attempts").
|
|
Msg("Failed to register prometheus metric")
|
|
return nil, err
|
|
}
|
|
return m, nil
|
|
}
|