2019-05-24 00:45:02 +00:00
|
|
|
# frozen_string_literal: true
|
|
|
|
#
|
2016-11-18 18:45:52 +00:00
|
|
|
# Adds logging for all Rack Attack blocks and throttling events.
|
|
|
|
|
|
|
|
ActiveSupport::Notifications.subscribe('rack.attack') do |name, start, finish, request_id, req|
|
|
|
|
if [:throttle, :blacklist].include? req.env['rack.attack.match_type']
|
2019-07-02 19:48:06 +00:00
|
|
|
rack_attack_info = {
|
2019-05-24 00:45:02 +00:00
|
|
|
message: 'Rack_Attack',
|
|
|
|
env: req.env['rack.attack.match_type'],
|
2019-08-20 18:12:28 +00:00
|
|
|
remote_ip: req.ip,
|
2019-05-24 00:45:02 +00:00
|
|
|
request_method: req.request_method,
|
2019-08-20 18:12:28 +00:00
|
|
|
path: req.fullpath
|
2019-07-02 19:48:06 +00:00
|
|
|
}
|
|
|
|
|
2019-07-09 03:58:49 +00:00
|
|
|
if %w(throttle_authenticated_api throttle_authenticated_web).include? req.env['rack.attack.matched']
|
2019-07-02 19:48:06 +00:00
|
|
|
user_id = req.env['rack.attack.match_discriminator']
|
|
|
|
user = User.find_by(id: user_id)
|
|
|
|
|
|
|
|
rack_attack_info[:user_id] = user_id
|
|
|
|
rack_attack_info[:username] = user.username unless user.nil?
|
|
|
|
end
|
|
|
|
|
|
|
|
Gitlab::AuthLogger.error(rack_attack_info)
|
2016-11-18 18:45:52 +00:00
|
|
|
end
|
|
|
|
end
|