micromegas 0.2.3

Micromegas is a scalable observability solution.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

use crate::key_ring::KeyRing;
use micromegas_tracing::prelude::*;
use tonic::{Request, Status};

pub fn check_auth(req: Request<()>, keyring: &KeyRing) -> Result<Request<()>, Status> {
    let metadata = req.metadata();
    let authorization = metadata
        .get(http::header::AUTHORIZATION.as_str())
        .ok_or_else(|| {
            trace!("missing authorization header"); // expected for health check from load balancer
            Status::unauthenticated("missing authorization header")
        })?
        .to_str()
        .map_err(|_e| {
            warn!("error parsing authorization header");
            Status::unauthenticated("error parsing authorization header")
        })?;
    let bearer = "Bearer ";
    if !authorization.starts_with(bearer) {
        warn!("Invalid auth header");
        return Err(Status::unauthenticated("Invalid auth header"));
    }
    let token = authorization[bearer.len()..].to_string();
    if let Some(name) = keyring.get(&token.into()) {
        info!("caller={name}");
        Ok(req)
    } else {
        warn!("invalid API token");
        Err(Status::unauthenticated("invalid API token"))
    }
}