Function auditHttp

audit/interceptor.go:222–244

(w *ResponseWriter, r *http.Request)

}

func auditHttp(w *ResponseWriter, r *http.Request) {
	body := getRequestBody(r)
	var user string
	if token := r.Header.Get("X-Dgraph-AccessToken"); token != "" {
		user = getUser(token, false)
	} else if token := r.Header.Get("X-Dgraph-AuthToken"); token != "" {
		user = getUser(token, true)
	} else {
		user = getUser("", false)
	}

	auditor.Audit(&AuditEvent{
		User:        user,
		Namespace:   x.ExtractNamespaceHTTP(r),
		ServerHost:  x.WorkerConfig.MyAddr,
		ClientHost:  r.RemoteAddr,
		Endpoint:    r.URL.Path,
		ReqType:     Http,
		Req:         truncate(checkRequestBody(Http, r.URL.Path, string(body)), maxReqLength),
		Status:      http.StatusText(w.statusCode),
		QueryParams: r.URL.Query(),
	})
}

// password fields are accessible only via /admin endpoint hence,
// this will be only called with /admin endpoint