datadog 2.10.0 → 2.12.0

data/lib/datadog/appsec/contrib/rails/reactive/action.rb

@@ -1,53 +0,0 @@
-# frozen_string_literal: true
-
-require_relative '../request'
-
-module Datadog
-  module AppSec
-    module Contrib
-      module Rails
-        module Reactive
-          # Dispatch data from a Rails request to the WAF context
-          module Action
-            ADDRESSES = [
-              'rails.request.body',
-              'rails.request.route_params',
-            ].freeze
-            private_constant :ADDRESSES
-
-            def self.publish(engine, gateway_request)
-              catch(:block) do
-                # params have been parsed from the request body
-                engine.publish('rails.request.body', gateway_request.parsed_body)
-                engine.publish('rails.request.route_params', gateway_request.route_params)
-
-                nil
-              end
-            end
-
-            def self.subscribe(engine, context)
-              engine.subscribe(*ADDRESSES) do |*values|
-                Datadog.logger.debug { "reacted to #{ADDRESSES.inspect}: #{values.inspect}" }
-                body = values[0]
-                path_params = values[1]
-
-                persistent_data = {
-                  'server.request.body' => body,
-                  'server.request.path_params' => path_params,
-                }
-
-                waf_timeout = Datadog.configuration.appsec.waf_timeout
-                result = context.run_waf(persistent_data, {}, waf_timeout)
-
-                next unless result.match?
-
-                yield result
-                throw(:block, true) unless result.actions.empty?
-              end
-            end
-          end
-        end
-      end
-    end
-  end
-end

data/lib/datadog/appsec/contrib/sinatra/reactive/routed.rb

@@ -1,48 +0,0 @@
-# frozen_string_literal: true
-
-module Datadog
-  module AppSec
-    module Contrib
-      module Sinatra
-        module Reactive
-          # Dispatch data from a Sinatra request to the WAF context
-          module Routed
-            ADDRESSES = [
-              'sinatra.request.route_params',
-            ].freeze
-            private_constant :ADDRESSES
-
-            def self.publish(engine, data)
-              _request, route_params = data
-
-              catch(:block) do
-                engine.publish('sinatra.request.route_params', route_params.params)
-
-                nil
-              end
-            end
-
-            def self.subscribe(engine, context)
-              engine.subscribe(*ADDRESSES) do |*values|
-                Datadog.logger.debug { "reacted to #{ADDRESSES.inspect}: #{values.inspect}" }
-                path_params = values[0]
-
-                persistent_data = {
-                  'server.request.path_params' => path_params,
-                }
-
-                waf_timeout = Datadog.configuration.appsec.waf_timeout
-                result = context.run_waf(persistent_data, {}, waf_timeout)
-
-                next unless result.match?
-
-                yield result
-                throw(:block, true) unless result.actions.empty?
-              end
-            end
-          end
-        end
-      end
-    end
-  end
-end

data/lib/datadog/appsec/monitor/reactive/set_user.rb

@@ -1,45 +0,0 @@
-# frozen_string_literal: true
-
-module Datadog
-  module AppSec
-    module Monitor
-      module Reactive
-        # Dispatch data from Datadog::Kit::Identity.set_user to the WAF context
-        module SetUser
-          ADDRESSES = [
-            'usr.id',
-          ].freeze
-          private_constant :ADDRESSES
-
-          def self.publish(engine, user)
-            catch(:block) do
-              engine.publish('usr.id', user.id)
-
-              nil
-            end
-          end
-
-          def self.subscribe(engine, context)
-            engine.subscribe(*ADDRESSES) do |*values|
-              Datadog.logger.debug { "reacted to #{ADDRESSES.inspect}: #{values.inspect}" }
-
-              user_id = values[0]
-
-              persistent_data = {
-                'usr.id' => user_id,
-              }
-
-              waf_timeout = Datadog.configuration.appsec.waf_timeout
-              result = context.run_waf(persistent_data, {}, waf_timeout)
-
-              next unless result.match?
-
-              yield result
-              throw(:block, true) unless result.actions.empty?
-            end
-          end
-        end
-      end
-    end
-  end
-end

data/lib/datadog/appsec/reactive/address_hash.rb

@@ -1,22 +0,0 @@
-# frozen_string_literal: true
-
-module Datadog
-  module AppSec
-    module Reactive
-      # AddressHash for Reactive Engine
-      class AddressHash < Hash
-        def self.new(*arguments, &block)
-          super { |h, k| h[k] = [] }
-        end
-
-        def addresses
-          keys.flatten
-        end
-
-        def with(address)
-          keys.select { |k| k.include?(address) }
-        end
-      end
-    end
-  end
-end

data/lib/datadog/appsec/reactive/engine.rb

@@ -1,47 +0,0 @@
-# frozen_string_literal: true
-
-require_relative 'address_hash'
-require_relative 'subscriber'
-
-module Datadog
-  module AppSec
-    module Reactive
-      # Reactive Engine
-      class Engine
-        def initialize
-          @data = {}
-          @subscribers = AddressHash.new
-        end
-
-        def subscribe(*addresses, &block)
-          @subscribers[addresses.freeze] << Subscriber.new(&block)
-        end
-
-        def publish(address, value)
-          # check if someone has address subscribed
-          if @subscribers.addresses.include?(address)
-
-            # someone will be interested, set value
-            @data[address] = value
-
-            # find candidates i.e address groups that contain the just posted address
-            @subscribers.with(address).each do |addresses|
-              # find targets to the address group containing the posted address
-              subscribers = @subscribers[addresses]
-
-              # is all data for the targets available?
-              if (addresses - @data.keys).empty?
-                hash = addresses.each_with_object({}) { |a, h| h[a] = @data[a] }
-                subscribers.each { |s| s.call(*hash.values) }
-              end
-            end
-          end
-        end
-
-        private
-
-        attr_reader :subscribers, :data
-      end
-    end
-  end
-end

data/lib/datadog/appsec/reactive/subscriber.rb

@@ -1,19 +0,0 @@
-# frozen_string_literal: true
-
-module Datadog
-  module AppSec
-    module Reactive
-      # Reactive Engine subscriber
-      class Subscriber
-        def initialize(&block)
-          @block = block
-          freeze
-        end
-
-        def call(*args)
-          @block.call(*args)
-        end
-      end
-    end
-  end
-end

data/lib/datadog/core/remote/transport/http/api/instance.rb

@@ -1,39 +0,0 @@
-# frozen_string_literal: true
-
-module Datadog
-  module Core
-    module Remote
-      module Transport
-        module HTTP
-          module API
-            # An API configured with adapter and routes
-            class Instance
-              attr_reader \
-                :adapter,
-                :headers,
-                :spec
-
-              def initialize(spec, adapter, options = {})
-                @spec = spec
-                @adapter = adapter
-                @headers = options.fetch(:headers, {})
-              end
-
-              def encoder
-                spec.encoder
-              end
-
-              def call(env)
-                # Add headers to request env, unless empty.
-                env.headers.merge!(headers) unless headers.empty?
-
-                # Send request env to the adapter.
-                adapter.call(env)
-              end
-            end
-          end
-        end
-      end
-    end
-  end
-end

data/lib/datadog/core/remote/transport/http/api/spec.rb

@@ -1,21 +0,0 @@
-# frozen_string_literal: true
-
-module Datadog
-  module Core
-    module Remote
-      module Transport
-        module HTTP
-          module API
-            # Specification for an HTTP API
-            # Defines behaviors without specific configuration details.
-            class Spec
-              def initialize
-                yield(self) if block_given?
-              end
-            end
-          end
-        end
-      end
-    end
-  end
-end

data/lib/datadog/core/remote/transport/http/builder.rb

@@ -1,219 +0,0 @@
-# frozen_string_literal: true
-
-require_relative '../../../configuration/agent_settings_resolver'
-require_relative '../../../transport/http/adapters/registry'
-require_relative '../../../transport/http/api/map'
-
-# TODO: Decouple standard transport/http/api/instance
-#
-# Separate classes are needed because transport/http/trace includes
-# Trace::API::Instance which closes over and uses a single spec, which is
-# negotiated as either /v3 or /v4 for the whole API at the spec level, but we
-# need an independent toplevel path at the endpoint level.
-#
-# Separate classes are needed because of `include Trace::API::Instance`.
-#
-# Below should be:
-# require_relative '../../../../datadog/core/transport/http/api/instance'
-require_relative 'api/instance'
-
-# TODO: Decouple transport/http/client
-#
-# The standard one does `include Transport::HTTP::Statistics` and performs
-# stats updates, which may or may not be desirable in general.
-#
-# Below should be:
-# require_relative '../../../../datadog/core/transport/http/client'
-require_relative 'client'
-
-# TODO: Decouple transport/http/builder
-#
-# This class is duplicated even though it is tantalisingly close to the
-# one in datadog/core/transport mostly because it refers to a different
-# `API::Instance` in `#api_instance_class` but also because it operates on a
-# different `HTTP::Client`, as well as de-hardcoding the transport class
-# `Transport::Traces::Transport` in `#to_transport`
-#
-# Additionally, its design makes it so there can be only one (API, Client,
-# Transport) triplet, requiring a new transport instance for any varying
-# element of the triplet.
-
-module Datadog
-  module Core
-    module Remote
-      module Transport
-        module HTTP
-          # Builds new instances of Transport::HTTP::Client
-          class Builder
-            REGISTRY = Datadog::Core::Transport::HTTP::Adapters::Registry.new
-
-            attr_reader \
-              :apis,
-              :api_options,
-              :default_adapter,
-              :default_api,
-              :default_headers
-
-            def initialize
-              # Global settings
-              @default_adapter = nil
-              @default_headers = {}
-
-              # Client settings
-              @apis = Datadog::Core::Transport::HTTP::API::Map.new
-              @default_api = nil
-
-              # API settings
-              @api_options = {}
-
-              yield(self) if block_given?
-            end
-
-            def adapter(config, *args, **kwargs)
-              @default_adapter = case config
-                                 when Core::Configuration::AgentSettingsResolver::AgentSettings
-                                   registry_klass = REGISTRY.get(config.adapter)
-                                   raise UnknownAdapterError, config.adapter if registry_klass.nil?
-
-                                   registry_klass.build(config)
-                                 when Symbol
-                                   registry_klass = REGISTRY.get(config)
-                                   raise UnknownAdapterError, config if registry_klass.nil?
-
-                                   registry_klass.new(*args, **kwargs)
-                                 else
-                                   config
-                                 end
-            end
-
-            def headers(values = {})
-              @default_headers.merge!(values)
-            end
-
-            # Adds a new API to the client
-            # Valid options:
-            #  - :adapter
-            #  - :default
-            #  - :fallback
-            #  - :headers
-            def api(key, spec, options = {})
-              options = options.dup
-
-              # Copy spec into API map
-              @apis[key] = spec
-
-              # Apply as default API, if specified to do so.
-              @default_api = key if options.delete(:default) || @default_api.nil?
-
-              # Save all other settings for initialization
-              (@api_options[key] ||= {}).merge!(options)
-            end
-
-            def default_api=(key)
-              raise UnknownApiError, key unless @apis.key?(key)
-
-              @default_api = key
-            end
-
-            def to_transport(klass)
-              raise NoDefaultApiError if @default_api.nil?
-
-              klass.new(to_api_instances, @default_api)
-            end
-
-            def to_api_instances
-              raise NoApisError if @apis.empty?
-
-              @apis.inject(Datadog::Core::Transport::HTTP::API::Map.new) do |instances, (key, spec)|
-                instances.tap do
-                  api_options = @api_options[key].dup
-
-                  # Resolve the adapter to use for this API
-                  adapter = api_options.delete(:adapter) || @default_adapter
-                  raise NoAdapterForApiError, key if adapter.nil?
-
-                  # Resolve fallback and merge headers
-                  fallback = api_options.delete(:fallback)
-                  api_options[:headers] = @default_headers.merge((api_options[:headers] || {}))
-
-                  # Add API::Instance with all settings
-                  instances[key] = api_instance_class.new(
-                    spec,
-                    adapter,
-                    api_options
-                  )
-
-                  # Configure fallback, if provided.
-                  instances.with_fallbacks(key => fallback) unless fallback.nil?
-                end
-              end
-            end
-
-            def api_instance_class
-              API::Instance
-            end
-
-            # Raised when the API key does not match known APIs.
-            class UnknownApiError < StandardError
-              attr_reader :key
-
-              def initialize(key)
-                super()
-
-                @key = key
-              end
-
-              def message
-                "Unknown transport API '#{key}'!"
-              end
-            end
-
-            # Raised when the identifier cannot be matched to an adapter.
-            class UnknownAdapterError < StandardError
-              attr_reader :type
-
-              def initialize(type)
-                super()
-
-                @type = type
-              end
-
-              def message
-                "Unknown transport adapter '#{type}'!"
-              end
-            end
-
-            # Raised when an adapter cannot be resolved for an API instance.
-            class NoAdapterForApiError < StandardError
-              attr_reader :key
-
-              def initialize(key)
-                super()
-
-                @key = key
-              end
-
-              def message
-                "No adapter resolved for transport API '#{key}'!"
-              end
-            end
-
-            # Raised when built without defining APIs.
-            class NoApisError < StandardError
-              def message
-                'No APIs configured for transport!'
-              end
-            end
-
-            # Raised when client built without defining a default API.
-            class NoDefaultApiError < StandardError
-              def message
-                'No default API configured for transport!'
-              end
-            end
-          end
-        end
-      end
-    end
-  end
-end

data/lib/datadog/di/transport.rb

@@ -1,79 +0,0 @@
-# frozen_string_literal: true
-
-require_relative 'error'
-require_relative '../core/transport/http/adapters/net'
-
-module Datadog
-  module DI
-    # Transport for sending probe statuses and snapshots to local agent.
-    #
-    # Handles encoding of the payloads into multipart posts if necessary,
-    # body formatting/encoding, setting correct headers, etc.
-    #
-    # The transport does not handle batching of statuses or snapshots -
-    # the batching should be implemented upstream of this class.
-    #
-    # Timeout settings are forwarded from agent settings to the Net adapter.
-    #
-    # The send_* methods raise Error::AgentCommunicationError on errors
-    # (network errors and HTTP protocol errors). It is the responsibility
-    # of upstream code to rescue these exceptions appropriately to prevent them
-    # from being propagated to the application.
-    #
-    # @api private
-    class Transport
-      DIAGNOSTICS_PATH = '/debugger/v1/diagnostics'
-      INPUT_PATH = '/debugger/v1/input'
-
-      def initialize(agent_settings)
-        # Note that this uses host, port, timeout and TLS flag from
-        # agent settings.
-        @client = Core::Transport::HTTP::Adapters::Net.new(agent_settings)
-      end
-
-      def send_diagnostics(payload)
-        event_payload = Core::Vendor::Multipart::Post::UploadIO.new(
-          StringIO.new(JSON.dump(payload)), 'application/json', 'event.json'
-        )
-        payload = {'event' => event_payload}
-        # Core transport unconditionally specifies headers to underlying
-        # Net::HTTP client, ends up passing 'nil' as headers if none are
-        # specified by us, which then causes Net::HTTP to die with an exception.
-        send_request('Probe status submission',
-          path: DIAGNOSTICS_PATH, form: payload, headers: {})
-      end
-
-      def send_input(payload)
-        send_request('Probe snapshot submission',
-          path: INPUT_PATH, body: payload.to_json,
-          headers: {'content-type' => 'application/json'},)
-      end
-
-      # TODO status should use either input or diagnostics endpoints
-      # depending on agent version.
-      alias_method :send_status, :send_diagnostics
-
-      alias_method :send_snapshot, :send_input
-
-      private
-
-      attr_reader :client
-
-      def send_request(desc, **options)
-        env = Core::Transport::HTTP::Env.new(nil, options)
-        response = client.post(env)
-        unless response.ok?
-          raise Error::AgentCommunicationError, "#{desc} failed: #{response.code}: #{response.payload}"
-        end
-      # Datadog::Core::Transport does not perform any exception mapping,
-      # therefore we could have any exception here from failure to parse
-      # agent URI for example.
-      # If we ever implement retries for network errors, we should distinguish
-      # actual network errors from non-network errors that are raised by
-      # transport code.
-      rescue => exc
-        raise Error::AgentCommunicationError, "#{desc} failed: #{exc.class}: #{exc}"
-      end
-    end
-  end
-end