mirror of
https://github.com/zitadel/zitadel.git
synced 2026-07-25 18:28:00 +00:00
11dbb1b277
# Which Problems Are Solved Streams allow differentiating logs produced by different components of Zitadel. # How the Problems Are Solved The `backend/v3/instrumentation/logging` package now exposes convenience function for setting and getting a logger from the context. As well as high-level functions to emit log records at various levels. When constructing a new logger a "stream" needs to be specified: - **runtime**: General runtime logs, such as startup and shutdown messages. Default for logs that do not belong to the other categories. - **request**: Logs for incoming API and HTTP requests. - **event_handler**: Logs for event handling in projections. - **queue**: Logs for the job queue processing. - **event_pusher**: Logs for event pushing to the database. Disabled by default, contains sensitive information. Each line from the returned logger contains a `stream` field as well as a `version` field with the current Zitadel version. ## Runtime config Streams can be enabled by passing an array of stream names in the runtime config. Because some log streams may contain sensitive data (especially events), it is now also possible to mask values by their key. # Additional Changes - Wrap `slogctx` in the `logging` package. (Except API error converter packages, because of import cycle) - Add some docs to `logging` package so other devs understand how to add logging to Zitadel - Add `logging.OnError` and `logging.WithError` helper functions with `Panic()` and `Fatal()` methods, to preserve current calls in the `cmd` packages. - Add instance context extractor. - Only output request details in the request info log. Request ID remains propagated through context. - Moved middleware functionality into protocol specific packages. - Removed setting of URI to context in metric middleware. There were ony setters and no getters. (Unused value) - Reuse a single statusWriter in the middleware package for middlewares that need to know the response status. # Additional Context - Closes #11333 - Closes #11331 - Partly #11330 --------- Co-authored-by: Silvan <27845747+adlerhurst@users.noreply.github.com>
108 lines
3.5 KiB
Go
108 lines
3.5 KiB
Go
package http
|
|
|
|
import (
|
|
"context"
|
|
"log/slog"
|
|
"net/http"
|
|
|
|
"github.com/zitadel/zitadel/backend/v3/instrumentation/logging"
|
|
"github.com/zitadel/zitadel/internal/zerrors"
|
|
)
|
|
|
|
func ZitadelErrorToHTTPStatusCode(ctx context.Context, err error) (statusCode int, ok bool) {
|
|
if err == nil {
|
|
return http.StatusOK, true
|
|
}
|
|
statusCode, key, id, lvl := extractError(err)
|
|
msg := key
|
|
msg += " (" + id + ")"
|
|
logging.Log(ctx, lvl, msg, "err", err)
|
|
if statusCode == statusUnknown {
|
|
return http.StatusInternalServerError, false
|
|
}
|
|
return statusCode, true
|
|
}
|
|
|
|
const statusUnknown = 0
|
|
|
|
func extractError(err error) (statusCode int, msg, id string, lvl slog.Level) {
|
|
zitadelErr, ok := zerrors.AsZitadelError(err)
|
|
if !ok {
|
|
return statusUnknown, err.Error(), "", slog.LevelError
|
|
}
|
|
msg, id = zitadelErr.GetMessage(), zitadelErr.GetID()
|
|
|
|
switch zitadelErr.Kind {
|
|
case zerrors.KindAlreadyExists:
|
|
statusCode, lvl = http.StatusConflict, slog.LevelError
|
|
case zerrors.KindDeadlineExceeded:
|
|
statusCode, lvl = http.StatusGatewayTimeout, slog.LevelError
|
|
case zerrors.KindInternal:
|
|
statusCode, lvl = http.StatusInternalServerError, slog.LevelError
|
|
case zerrors.KindInvalidArgument:
|
|
statusCode, lvl = http.StatusBadRequest, slog.LevelWarn
|
|
case zerrors.KindNotFound:
|
|
statusCode, lvl = http.StatusNotFound, slog.LevelWarn
|
|
case zerrors.KindPermissionDenied:
|
|
statusCode, lvl = http.StatusForbidden, slog.LevelWarn
|
|
case zerrors.KindPreconditionFailed:
|
|
// use the same code as grpc-gateway:
|
|
// https://github.com/grpc-ecosystem/grpc-gateway/blob/9e33e38f15cb7d2f11096366e62ea391a3459ba9/runtime/errors.go#L59
|
|
statusCode, lvl = http.StatusBadRequest, slog.LevelWarn
|
|
case zerrors.KindUnauthenticated:
|
|
statusCode, lvl = http.StatusUnauthorized, slog.LevelWarn
|
|
case zerrors.KindUnavailable:
|
|
statusCode, lvl = http.StatusServiceUnavailable, slog.LevelError
|
|
case zerrors.KindUnimplemented:
|
|
statusCode, lvl = http.StatusNotImplemented, slog.LevelInfo
|
|
case zerrors.KindResourceExhausted:
|
|
statusCode, lvl = http.StatusTooManyRequests, slog.LevelError
|
|
case zerrors.KindCanceled:
|
|
statusCode, lvl = 499, slog.LevelWarn
|
|
case zerrors.KindDataLoss:
|
|
statusCode, lvl = http.StatusInternalServerError, slog.LevelError
|
|
case zerrors.KindOutOfRange:
|
|
statusCode, lvl = http.StatusBadRequest, slog.LevelWarn
|
|
case zerrors.KindAborted:
|
|
statusCode, lvl = http.StatusConflict, slog.LevelWarn
|
|
case zerrors.KindUnknown:
|
|
fallthrough
|
|
default:
|
|
statusCode, lvl = statusUnknown, slog.LevelError
|
|
}
|
|
return statusCode, msg, id, lvl
|
|
}
|
|
|
|
func HTTPStatusCodeToZitadelError(parent error, statusCode int, id string, message string) error {
|
|
if statusCode == http.StatusOK {
|
|
return nil
|
|
}
|
|
var errorFunc func(parent error, id, message string) error
|
|
switch statusCode {
|
|
case http.StatusConflict:
|
|
errorFunc = zerrors.ThrowAlreadyExists
|
|
case http.StatusGatewayTimeout:
|
|
errorFunc = zerrors.ThrowDeadlineExceeded
|
|
case http.StatusInternalServerError:
|
|
errorFunc = zerrors.ThrowInternal
|
|
case http.StatusBadRequest:
|
|
errorFunc = zerrors.ThrowInvalidArgument
|
|
case http.StatusNotFound:
|
|
errorFunc = zerrors.ThrowNotFound
|
|
case http.StatusForbidden:
|
|
errorFunc = zerrors.ThrowPermissionDenied
|
|
case http.StatusUnauthorized:
|
|
errorFunc = zerrors.ThrowUnauthenticated
|
|
case http.StatusServiceUnavailable:
|
|
errorFunc = zerrors.ThrowUnavailable
|
|
case http.StatusNotImplemented:
|
|
errorFunc = zerrors.ThrowUnimplemented
|
|
case http.StatusTooManyRequests:
|
|
errorFunc = zerrors.ThrowResourceExhausted
|
|
default:
|
|
errorFunc = zerrors.ThrowUnknown
|
|
}
|
|
|
|
return errorFunc(parent, id, message)
|
|
}
|