@mondaydotcomorg/monday-authorization 1.0.16 → 1.0.18

package/dist/lib/authorization-service.js

@@ -32,6 +32,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthorizationService = void 0;
+const perf_hooks_1 = require("perf_hooks");
 const monday_jwt_1 = require("@mondaydotcomorg/monday-jwt");
 const MondayLogger = __importStar(require("@mondaydotcomorg/monday-logger"));
 const monday_fetch_1 = __importDefault(require("@mondaydotcomorg/monday-fetch"));
@@ -45,33 +46,42 @@ class AuthorizationService {
     static isAuthorized(accountId, userId, resources, action) {
         return __awaiter(this, void 0, void 0, function* () {
             const internalAuthToken = monday_jwt_1.signAuthorizationHeader(INTERNAL_APP_NAME, accountId);
-            const params = createAuthorizationParams(resources, action);
+            const { authorizationObjects } = createAuthorizationParams(resources, action);
+            const startTime = perf_hooks_1.performance.now();
             const response = yield monday_fetch_1.default(URL, {
                 method: 'POST',
                 headers: { Authorization: internalAuthToken, 'Content-Type': 'application/json' },
                 timeout: REQUEST_TIMEOUT,
                 body: JSON.stringify({
                     user_id: userId,
-                    authorize_request_objects: params.authorizationObjects,
+                    authorize_request_objects: authorizationObjects,
                 }),
             }, { retries: 3, callback: logOnFetchFail });
+            const endTime = perf_hooks_1.performance.now();
+            const time = endTime - startTime;
+            const responseStatus = response.status;
+            prometheus_service_1.sendAuthorizationChecksPerRequestMetric(responseStatus, authorizationObjects.length);
             if (!response.ok) {
-                logger.error({ status: response.status }, 'Authorization middleware: authorization request failed');
-                return { isAuthorized: false };
+                logger.error({ status: response.status }, 'AuthorizationService: authorization request failed');
+                const isAuthorized = false;
+                authorizationObjects.forEach(function (authorizationObject) {
+                    prometheus_service_1.sendAuthorizationCheckResponseTimeMetric(authorizationObject.resource_type, action, isAuthorized, responseStatus, time);
+                });
+                return { isAuthorized };
             }
             const responseBody = yield response.json();
             const unauthorizedObjects = [];
             responseBody.result.forEach(function (isAuthorized, index) {
-                const authorizationObject = params.authorizationObjects[index];
+                const authorizationObject = authorizationObjects[index];
                 if (!isAuthorized) {
                     unauthorizedObjects.push(authorizationObject);
                 }
-                sendAuthorizationCheckMetric(authorizationObject.resource_type, isAuthorized);
+                prometheus_service_1.sendAuthorizationCheckResponseTimeMetric(authorizationObject.resource_type, action, isAuthorized, responseStatus, time);
             });
             if (unauthorizedObjects.length > 0) {
                 logger.info({
                     resources: JSON.stringify(unauthorizedObjects),
-                }, 'Authorization middleware: resource is unauthorized');
+                }, 'AuthorizationService: resource is unauthorized');
                 const unauthorizedIds = unauthorizedObjects.map(obj => obj.resource_id);
                 return { isAuthorized: false, unauthorizedIds };
             }
@@ -99,12 +109,3 @@ function createAuthorizationParams(resources, action) {
 function logOnFetchFail(retries, error, response) {
     logger.error({ attempt: retries, error }, 'Authorization attempt failed due to network issues');
 }
-function sendAuthorizationCheckMetric(resourceType, isAuthorized) {
-    const metricsManager = prometheus_service_1.getMetricsManager();
-    if (metricsManager) {
-        metricsManager.increaseCounter(prometheus_service_1.METRICS.AUTHORIZATION_CHECK, {
-            resourceType,
-            isAuthorized,
-        });
-    }
-}

package/dist/lib/prometheus-service.d.ts

@@ -1,5 +1,10 @@
+import { Action } from './types/general';
 export declare const METRICS: {
     AUTHORIZATION_CHECK: string;
+    AUTHORIZATION_CHECKS_PER_REQUEST: string;
+    AUTHORIZATION_CHECK_RESPONSE_TIME: string;
 };
 export declare function setPrometheus(customPrometheus: any): void;
 export declare function getMetricsManager(): any;
+export declare function sendAuthorizationChecksPerRequestMetric(responseStatus: any, amountOfAuthorizationObjects: any): void;
+export declare function sendAuthorizationCheckResponseTimeMetric(resourceType: string, action: Action, isAuthorized: boolean, responseStatus: number, time: number): void;

package/dist/lib/prometheus-service.js

@@ -1,15 +1,50 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getMetricsManager = exports.setPrometheus = exports.METRICS = void 0;
+exports.sendAuthorizationCheckResponseTimeMetric = exports.sendAuthorizationChecksPerRequestMetric = exports.getMetricsManager = exports.setPrometheus = exports.METRICS = void 0;
 let prometheus = null;
+let authorizationChecksPerRequestMetric = null;
+let authorizationCheckResponseTimeMetric = null;
 exports.METRICS = {
     AUTHORIZATION_CHECK: 'authorization_check',
+    AUTHORIZATION_CHECKS_PER_REQUEST: 'authorization_checks_per_request',
+    AUTHORIZATION_CHECK_RESPONSE_TIME: 'authorization_check_response_time',
+};
+const authorizationChecksPerRequestMetricConfig = {
+    name: exports.METRICS.AUTHORIZATION_CHECKS_PER_REQUEST,
+    labels: ['responseStatus'],
+    description: 'Authorization checks per request summary',
+};
+const authorizationCheckResponseTimeMetricConfig = {
+    name: exports.METRICS.AUTHORIZATION_CHECK_RESPONSE_TIME,
+    labels: ['resourceType', 'action', 'isAuthorized', 'responseStatus'],
+    description: 'Authorization check response time summary',
 };
 function setPrometheus(customPrometheus) {
     prometheus = customPrometheus;
+    const { METRICS_TYPES } = prometheus;
+    authorizationChecksPerRequestMetric = getMetricsManager().addMetric(METRICS_TYPES.SUMMARY, authorizationChecksPerRequestMetricConfig.name, authorizationChecksPerRequestMetricConfig.labels, authorizationChecksPerRequestMetricConfig.description);
+    authorizationCheckResponseTimeMetric = getMetricsManager().addMetric(METRICS_TYPES.SUMMARY, authorizationCheckResponseTimeMetricConfig.name, authorizationCheckResponseTimeMetricConfig.labels, authorizationCheckResponseTimeMetricConfig.description);
 }
 exports.setPrometheus = setPrometheus;
 function getMetricsManager() {
     return prometheus === null || prometheus === void 0 ? void 0 : prometheus.metricsManager;
 }
 exports.getMetricsManager = getMetricsManager;
+function sendAuthorizationChecksPerRequestMetric(responseStatus, amountOfAuthorizationObjects) {
+    try {
+        if (authorizationChecksPerRequestMetric) {
+            authorizationChecksPerRequestMetric.labels(responseStatus).observe(amountOfAuthorizationObjects);
+        }
+    }
+    catch (e) { }
+}
+exports.sendAuthorizationChecksPerRequestMetric = sendAuthorizationChecksPerRequestMetric;
+function sendAuthorizationCheckResponseTimeMetric(resourceType, action, isAuthorized, responseStatus, time) {
+    try {
+        if (authorizationCheckResponseTimeMetric) {
+            authorizationCheckResponseTimeMetric.labels(resourceType, action, isAuthorized, responseStatus).observe(time);
+        }
+    }
+    catch (e) { }
+}
+exports.sendAuthorizationCheckResponseTimeMetric = sendAuthorizationCheckResponseTimeMetric;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mondaydotcomorg/monday-authorization",
-  "version": "1.0.16",
+  "version": "1.0.18",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "license": "BSD-3-Clause",
@@ -31,5 +31,5 @@
   "files": [
     "dist/"
   ],
-  "gitHead": "bc21495debb5e34772c3c1fd8dff26870081d103"
+  "gitHead": "003096557ca719ae941f421a0960c170e74d5cc1"
 }