Function AuditRequestHttp

audit/interceptor.go:97–128

(next http.Handler)

}

func AuditRequestHttp(next http.Handler) http.Handler {
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		skip := func(method string) bool {
			return skipEPs[r.URL.Path]
		}

		if atomic.LoadUint32(&auditEnabled) == 0 || skip(r.URL.Path) {
			next.ServeHTTP(w, r)
			return
		}

		// Websocket connection in graphQl happens differently. We only get access tokens and
		// metadata in payload later once the connection is upgraded to correct protocol.
		// Doc: https://github.com/apollographql/subscriptions-transport-ws/blob/v0.9.4/PROTOCOL.md
		//
		// Auditing for websocket connections will be handled by graphql/admin/http.go:154#Subscribe
		for _, subprotocol := range websocket.Subprotocols(r) {
			if subprotocol == "graphql-ws" {
				next.ServeHTTP(w, r)
				return
			}
		}

		rw := NewResponseWriter(w)
		var buf bytes.Buffer
		tee := io.TeeReader(r.Body, &buf)
		r.Body = io.NopCloser(tee)
		next.ServeHTTP(rw, r)
		r.Body = io.NopCloser(bytes.NewReader(buf.Bytes()))
		auditHttp(rw, r)
	})
}

func AuditWebSockets(ctx context.Context, req *schema.Request) {
	if atomic.LoadUint32(&auditEnabled) == 0 {