tibba-middleware 0.2.2

// Copyright 2026 Tree xie.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

use super::{ClientIp, LOG_TARGET};
use axum::extract::Request;
use axum::extract::State;
use axum::middleware::Next;
use axum::response::Response;
use scopeguard::defer;
use std::borrow::Cow;
use tibba_error::Error;
use tibba_state::{AppState, CTX};
use tibba_util::get_header_value;
use tracing::{debug, info};
use urlencoding::decode;

// Custom Result type for error handling
type Result<T> = std::result::Result<T, Error>;

/// Statistics middleware that logs request/response information
///
/// This middleware captures and logs:
/// - Request metadata (URI, method, headers)
/// - Client information (IP, forwarded headers)
/// - Response status and timing
/// - Error details when applicable
/// - Processing statistics
///
/// # Arguments
/// * `State(state)` - Application state for processing stats
/// * `InsecureClientIp(ip)` - Client IP address
/// * `req` - The incoming request
/// * `next` - The next middleware in the chain
pub async fn stats(
    State(state): State<&AppState>,
    ClientIp(ip): ClientIp,
    req: Request,
    next: Next,
) -> Result<Response> {
    // Log middleware entry
    debug!(target: LOG_TARGET, "--> stats");
    // Ensure exit logging happens even if processing panics
    defer!(debug!(target: LOG_TARGET, "<-- stats"););

    // Decode URI for logging (handles URL-encoded characters)
    let uri_str = req.uri().to_string();
    let uri: Cow<str> = decode(&uri_str).unwrap_or(Cow::from(&uri_str));

    // Collect request information
    let method = req.method().clone();
    let headers = req.headers();
    let x_forwarded_for = get_header_value(headers, "X-Forwarded-For")
        .unwrap_or_default()
        .to_string();
    let referrer = get_header_value(headers, "Referer")
        .unwrap_or_default()
        .to_string();
    let user_agent = get_header_value(headers, "User-Agent")
        .unwrap_or_default()
        .to_string();

    // Process the request
    let res = next.run(req).await;
    let status = res.status().as_u16();
    let ctx = CTX.get();

    // Extract error message for 4xx/5xx responses
    let message = if status >= 400 {
        // 从 response extensions 中提取错误信息
        res.extensions()
            .get::<Error>()
            .map(|err| err.message.clone())
    } else {
        None
    };

    // Log comprehensive request/response information
    info!(
        target: LOG_TARGET,
        device_id = ctx.device_id,           // Device identification
        trace_id = ctx.trace_id,             // Request trace ID
        account = %ctx.get_account(),         // Account ID
        ip = %ip,                 // Client IP
        processing = state.get_processing(), // Current processing count
        x_forwarded_for,                      // Forwarded IP chain
        referrer,                             // Request referrer
        user_agent,                           // Client user agent
        method = %method,                     // HTTP method
        uri = uri.as_ref(),                   // Request URI
        status,                               // Response status code
        elapsed = ctx.elapsed_ms(),           // Request processing time (ms)
        error = message,                      // Error message if any
    );

    Ok(res)
}