mirror of
https://github.com/coder/coder.git
synced 2026-06-03 13:08:25 +00:00
7a339a1ffe
This is the second PR for moving connection events out of the audit log.
This PR:
- Adds the `/api/v2/connectionlog` endpoint
- Adds filtering for `GetAuthorizedConnectionLogsOffset` and thus the endpoint.
There's quite a few, but I was aiming for feature parity with the audit log.
1. `organization:<id|name>`
2. `workspace_owner:<username>`
3. `workspace_owner_email:<email>`
4. `type:<ssh|vscode|jetbrains|reconnecting_pty|workspace_app|port_forwarding>`
5. `username:<username>`
- Only includes web-based connection events (workspace apps, web port forwarding) as only those include user metadata.
6. `user_email:<email>`
7. `connected_after:<time>`
8. `connected_before:<time>`
9. `workspace_id:<id>`
10. `connection_id:<id>`
- If you have one snapshot of the connection log, and some sessions are ongoing in that snapshot, you could use this filter to check if they've been closed since.
11. `status:<connected|disconnected>`
- If `connected` only sessions with a null `close_time` are returned, if `disconnected`, only those with a non-null `close_time`. If filter is omitted, both are returned.
Future PRs:
- Populate `count` on `ConnectionLogResponse` using a seperate query (to preemptively mitigate the issue described in #17689)
- Implement a table in the Web UI for viewing connection logs.
- Write a query to delete old events from the audit log, call it from dbpurge.
- Write documentation for the endpoint / feature (including these filters)
127 lines
4.1 KiB
Go
127 lines
4.1 KiB
Go
package codersdk
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"net/http"
|
|
"net/netip"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/google/uuid"
|
|
)
|
|
|
|
type ConnectionLog struct {
|
|
ID uuid.UUID `json:"id" format:"uuid"`
|
|
ConnectTime time.Time `json:"connect_time" format:"date-time"`
|
|
Organization MinimalOrganization `json:"organization"`
|
|
WorkspaceOwnerID uuid.UUID `json:"workspace_owner_id" format:"uuid"`
|
|
WorkspaceOwnerUsername string `json:"workspace_owner_username"`
|
|
WorkspaceID uuid.UUID `json:"workspace_id" format:"uuid"`
|
|
WorkspaceName string `json:"workspace_name"`
|
|
AgentName string `json:"agent_name"`
|
|
IP netip.Addr `json:"ip"`
|
|
Type ConnectionType `json:"type"`
|
|
|
|
// WebInfo is only set when `type` is one of:
|
|
// - `ConnectionTypePortForwarding`
|
|
// - `ConnectionTypeWorkspaceApp`
|
|
WebInfo *ConnectionLogWebInfo `json:"web_info,omitempty"`
|
|
|
|
// SSHInfo is only set when `type` is one of:
|
|
// - `ConnectionTypeSSH`
|
|
// - `ConnectionTypeReconnectingPTY`
|
|
// - `ConnectionTypeVSCode`
|
|
// - `ConnectionTypeJetBrains`
|
|
SSHInfo *ConnectionLogSSHInfo `json:"ssh_info,omitempty"`
|
|
}
|
|
|
|
// ConnectionType is the type of connection that the agent is receiving.
|
|
type ConnectionType string
|
|
|
|
const (
|
|
ConnectionTypeSSH ConnectionType = "ssh"
|
|
ConnectionTypeVSCode ConnectionType = "vscode"
|
|
ConnectionTypeJetBrains ConnectionType = "jetbrains"
|
|
ConnectionTypeReconnectingPTY ConnectionType = "reconnecting_pty"
|
|
ConnectionTypeWorkspaceApp ConnectionType = "workspace_app"
|
|
ConnectionTypePortForwarding ConnectionType = "port_forwarding"
|
|
)
|
|
|
|
// ConnectionLogStatus is the status of a connection log entry.
|
|
// It's the argument to the `status` filter when fetching connection logs.
|
|
type ConnectionLogStatus string
|
|
|
|
const (
|
|
ConnectionLogStatusOngoing ConnectionLogStatus = "ongoing"
|
|
ConnectionLogStatusCompleted ConnectionLogStatus = "completed"
|
|
)
|
|
|
|
func (s ConnectionLogStatus) Valid() bool {
|
|
switch s {
|
|
case ConnectionLogStatusOngoing, ConnectionLogStatusCompleted:
|
|
return true
|
|
default:
|
|
return false
|
|
}
|
|
}
|
|
|
|
type ConnectionLogWebInfo struct {
|
|
UserAgent string `json:"user_agent"`
|
|
// User is omitted if the connection event was from an unauthenticated user.
|
|
User *User `json:"user"`
|
|
SlugOrPort string `json:"slug_or_port"`
|
|
// StatusCode is the HTTP status code of the request.
|
|
StatusCode int32 `json:"status_code"`
|
|
}
|
|
|
|
type ConnectionLogSSHInfo struct {
|
|
ConnectionID uuid.UUID `json:"connection_id" format:"uuid"`
|
|
// DisconnectTime is omitted if a disconnect event with the same connection ID
|
|
// has not yet been seen.
|
|
DisconnectTime *time.Time `json:"disconnect_time,omitempty" format:"date-time"`
|
|
// DisconnectReason is omitted if a disconnect event with the same connection ID
|
|
// has not yet been seen.
|
|
DisconnectReason string `json:"disconnect_reason,omitempty"`
|
|
// ExitCode is the exit code of the SSH session. It is omitted if a
|
|
// disconnect event with the same connection ID has not yet been seen.
|
|
ExitCode *int32 `json:"exit_code,omitempty"`
|
|
}
|
|
|
|
type ConnectionLogsRequest struct {
|
|
SearchQuery string `json:"q,omitempty"`
|
|
Pagination
|
|
}
|
|
|
|
type ConnectionLogResponse struct {
|
|
ConnectionLogs []ConnectionLog `json:"connection_logs"`
|
|
Count int64 `json:"count"`
|
|
}
|
|
|
|
func (c *Client) ConnectionLogs(ctx context.Context, req ConnectionLogsRequest) (ConnectionLogResponse, error) {
|
|
res, err := c.Request(ctx, http.MethodGet, "/api/v2/connectionlog", nil, req.Pagination.asRequestOption(), func(r *http.Request) {
|
|
q := r.URL.Query()
|
|
var params []string
|
|
if req.SearchQuery != "" {
|
|
params = append(params, req.SearchQuery)
|
|
}
|
|
q.Set("q", strings.Join(params, " "))
|
|
r.URL.RawQuery = q.Encode()
|
|
})
|
|
if err != nil {
|
|
return ConnectionLogResponse{}, err
|
|
}
|
|
defer res.Body.Close()
|
|
|
|
if res.StatusCode != http.StatusOK {
|
|
return ConnectionLogResponse{}, ReadBodyAsError(res)
|
|
}
|
|
|
|
var logRes ConnectionLogResponse
|
|
err = json.NewDecoder(res.Body).Decode(&logRes)
|
|
if err != nil {
|
|
return ConnectionLogResponse{}, err
|
|
}
|
|
return logRes, nil
|
|
}
|