566fb27fc1
Similar to MinIO now it's possible to configure webhooks to log all triggered errors and incomming requests via env variables: ``` CONSOLE_LOGGER_WEBHOOK_ENABLE_<ID> CONSOLE_LOGGER_WEBHOOK_ENDPOINT_<ID> CONSOLE_LOGGER_WEBHOOK_AUTH_TOKEN_<ID> CONSOLE_LOGGER_WEBHOOK_CLIENT_CERT_<ID> CONSOLE_LOGGER_WEBHOOK_CLIENT_KEY_<ID> CONSOLE_LOGGER_WEBHOOK_QUEUE_SIZE_<ID> CONSOLE_AUDIT_WEBHOOK_ENABLE_<ID> CONSOLE_AUDIT_WEBHOOK_ENDPOINT_<ID> CONSOLE_AUDIT_WEBHOOK_AUTH_TOKEN_<ID> CONSOLE_AUDIT_WEBHOOK_CLIENT_CERT_<ID> CONSOLE_AUDIT_WEBHOOK_QUEUE_SIZE_<ID> ``` Signed-off-by: Lenin Alevski <alevsk.8772@gmail.com>
121 lines
3.5 KiB
Go
121 lines
3.5 KiB
Go
// This file is part of MinIO Console Server
|
|
// Copyright (c) 2022 MinIO, Inc.
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
package restapi
|
|
|
|
import (
|
|
"context"
|
|
"encoding/binary"
|
|
"encoding/hex"
|
|
"fmt"
|
|
"hash/crc32"
|
|
"io"
|
|
"io/ioutil"
|
|
"net/http"
|
|
|
|
"github.com/go-openapi/runtime"
|
|
"github.com/go-openapi/runtime/middleware"
|
|
"github.com/minio/console/models"
|
|
"github.com/minio/console/restapi/operations"
|
|
inspectApi "github.com/minio/console/restapi/operations/inspect"
|
|
"github.com/minio/madmin-go"
|
|
"github.com/secure-io/sio-go"
|
|
)
|
|
|
|
func registerInspectHandler(api *operations.ConsoleAPI) {
|
|
api.InspectInspectHandler = inspectApi.InspectHandlerFunc(func(params inspectApi.InspectParams, principal *models.Principal) middleware.Responder {
|
|
k, r, err := getInspectResult(principal, ¶ms)
|
|
isEncryptOn := params.Encrypt != nil && *params.Encrypt
|
|
|
|
if err != nil {
|
|
return inspectApi.NewInspectDefault(int(err.Code)).WithPayload(err)
|
|
}
|
|
|
|
return middleware.ResponderFunc(processInspectResponse(isEncryptOn, k, r))
|
|
})
|
|
}
|
|
|
|
func getInspectResult(session *models.Principal, params *inspectApi.InspectParams) (*[32]byte, io.ReadCloser, *models.Error) {
|
|
ctx, cancel := context.WithCancel(params.HTTPRequest.Context())
|
|
defer cancel()
|
|
mAdmin, err := NewMinioAdminClient(session)
|
|
if err != nil {
|
|
return nil, nil, ErrorWithContext(ctx, err)
|
|
}
|
|
|
|
var cfg madmin.InspectOptions
|
|
cfg.File = params.File
|
|
cfg.Volume = params.Volume
|
|
|
|
// create a MinIO Admin Client interface implementation
|
|
// defining the client to be used
|
|
adminClient := AdminClient{Client: mAdmin}
|
|
|
|
k, r, err := adminClient.inspect(ctx, cfg)
|
|
|
|
if err != nil {
|
|
return nil, nil, ErrorWithContext(ctx, err)
|
|
}
|
|
return &k, r, nil
|
|
}
|
|
|
|
//borrowed from mc cli
|
|
func decryptInspect(key [32]byte, r io.Reader) io.ReadCloser {
|
|
stream, err := sio.AES_256_GCM.Stream(key[:])
|
|
if err != nil {
|
|
return nil
|
|
}
|
|
nonce := make([]byte, stream.NonceSize())
|
|
return ioutil.NopCloser(stream.DecryptReader(r, nonce, nil))
|
|
}
|
|
|
|
func processInspectResponse(isEnc bool, k *[32]byte, r io.ReadCloser) func(w http.ResponseWriter, _ runtime.Producer) {
|
|
return func(w http.ResponseWriter, _ runtime.Producer) {
|
|
var id [4]byte
|
|
binary.LittleEndian.PutUint32(id[:], crc32.ChecksumIEEE(k[:]))
|
|
defer r.Close()
|
|
|
|
ext := "enc"
|
|
if !isEnc {
|
|
ext = "zip"
|
|
r = decryptInspect(*k, r)
|
|
}
|
|
|
|
fileName := fmt.Sprintf("inspect.%s.%s", hex.EncodeToString(id[:]), ext)
|
|
|
|
if isEnc {
|
|
// use cookie to transmit the Decryption Key.
|
|
hexKey := hex.EncodeToString(id[:]) + hex.EncodeToString(k[:])
|
|
cookie := http.Cookie{
|
|
Name: fileName,
|
|
Value: hexKey,
|
|
Path: "/",
|
|
MaxAge: 3000,
|
|
}
|
|
http.SetCookie(w, &cookie)
|
|
}
|
|
|
|
w.Header().Set("Content-Type", "application/octet-stream")
|
|
w.Header().Set("Content-Disposition", fmt.Sprintf("attachment; filename=\"%s\"", fileName))
|
|
|
|
_, err := io.Copy(w, r)
|
|
|
|
if err != nil {
|
|
LogError("Unable to write all the data: %v", err)
|
|
}
|
|
}
|
|
}
|