@contrast/instrumentation 1.0.0 → 1.1.0

package/lib/http.js

@@ -0,0 +1,51 @@
+/*
+ * Copyright: 2022 Contrast Security, Inc
+ * Contact: support@contrastsecurity.com
+ * License: Commercial
+
+ * NOTICE: This Software and the patented inventions embodied within may only be
+ * used as part of Contrast Security’s commercial offerings. Even though it is
+ * made available through public repositories, use of this Software is subject to
+ * the applicable End User Licensing Agreement found at
+ * https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
+ * between Contrast Security and the End User. The Software may not be reverse
+ * engineered, modified, repackaged, sold, redistributed or otherwise used in a
+ * way not consistent with the End User License Agreement.
+ */
+'use strict';
+
+const { get } = require('./utils');
+
+module.exports = function(core) {
+  const {
+    patcher,
+    depHooks
+  } = core;
+
+  function hook (moduleName, patchObjects) {
+    depHooks.resolve({ name: moduleName }, (module) => {
+      patchObjects.forEach((obj) => {
+        const { name, methods, around, patchType } = obj;
+        methods.forEach((method) => {
+          const patchObj = get(module, name);
+          patcher.patch(patchObj, method, {
+            name: `${moduleName}.${name}.${method}`,
+            patchType,
+            around,
+          });
+        });
+      });
+    });
+  }
+  return {
+    'http'(opts) {
+      hook('http', opts.patchObjects);
+    },
+    'https'(opts) {
+      hook('https', opts.patchObjects);
+    },
+    'spdy'(opts) {
+      hook('spdy', opts.patchObjects);
+    }
+  };
+};

package/lib/http2.js

@@ -0,0 +1,57 @@
+/*
+ * Copyright: 2022 Contrast Security, Inc
+ * Contact: support@contrastsecurity.com
+ * License: Commercial
+
+ * NOTICE: This Software and the patented inventions embodied within may only be
+ * used as part of Contrast Security’s commercial offerings. Even though it is
+ * made available through public repositories, use of this Software is subject to
+ * the applicable End User Licensing Agreement found at
+ * https://www.contrastsecurity.com/enduser-terms-0317a or as otherwise agreed
+ * between Contrast Security and the End User. The Software may not be reverse
+ * engineered, modified, repackaged, sold, redistributed or otherwise used in a
+ * way not consistent with the End User License Agreement.
+ */
+'use strict';
+
+module.exports = function(core) {
+  const {
+    patcher,
+    depHooks
+  } = core;
+
+  return {
+    'http2'(opts) {
+      depHooks.resolve({ name: 'http2' }, (http2) => {
+        opts.patchObjects.forEach((obj) => {
+          const { methods, patchType, patchObjects } = obj;
+          methods.forEach((method) => {
+            patcher.patch(http2, method, {
+              name: `http2.${method}`,
+              patchType,
+              post(data) {
+                const { result: server } = data;
+                const serverPrototype = server ? Object.getPrototypeOf(server) : null;
+
+                if (!serverPrototype) {
+                  core.logger.error('Unable to patch server prototype, continue without instrumentation');
+                  return;
+                }
+                patchObjects.forEach((obj) => {
+                  const { name, methods, patchType, around } = obj;
+                  methods.forEach((method) => {
+                    patcher.patch(serverPrototype, method, {
+                      name: `http2.${name}.${method}`,
+                      patchType,
+                      around
+                    });
+                  });
+                });
+              }
+            });
+          });
+        });
+      });
+    }
+  };
+};

package/lib/index.js

@@ -16,7 +16,9 @@
 'use strict';
 module.exports = function(core) {
   const installers = {
-    ...require('./mongodb')(core)
+    ...require('./mongodb')(core),
+    ...require('./http')(core),
+    ...require('./http2')(core)
   };
 
   return core.instrumentation = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/instrumentation",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Shared hooks and patches between Protect and Assess components",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",