Module: Datadog::AppSec::Contrib::Sinatra::Gateway::Watcher

Defined in:
lib/datadog/appsec/contrib/sinatra/gateway/watcher.rb

Overview

Watcher for Sinatra gateway events

Class Method Summary collapse

Class Method Details

.watch ⇒ Object 



14
15
16
17
18
19
 
# File 'lib/datadog/appsec/contrib/sinatra/gateway/watcher.rb', line 14

def watch
  gateway = Instrumentation.gateway

  watch_request_dispatch(gateway)
  watch_request_routed(gateway)
end

.watch_request_dispatch(gateway = Instrumentation.gateway) ⇒ Object 



21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
 
# File 'lib/datadog/appsec/contrib/sinatra/gateway/watcher.rb', line 21

def watch_request_dispatch(gateway = Instrumentation.gateway)
  gateway.watch('sinatra.request.dispatch', :appsec) do |stack, gateway_request|
    context = gateway_request.env[Datadog::AppSec::Ext::CONTEXT_KEY]

    persistent_data = {
      'server.request.body' => gateway_request.form_hash
    }

    result = context.run_waf(persistent_data, {}, Datadog.configuration.appsec.waf_timeout)

    if result.match?
      Datadog::AppSec::Event.tag_and_keep!(context, result)

      context.events << {
        waf_result: result,
        trace: context.trace,
        span: context.span,
        request: gateway_request,
        actions: result.actions
      }

      Datadog::AppSec::ActionsHandler.handle(result.actions)
    end

    stack.call(gateway_request.request)
  end
end

.watch_request_routed(gateway = Instrumentation.gateway) ⇒ Object 



49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
 
# File 'lib/datadog/appsec/contrib/sinatra/gateway/watcher.rb', line 49

def watch_request_routed(gateway = Instrumentation.gateway)
  gateway.watch('sinatra.request.routed', :appsec) do |stack, (gateway_request, gateway_route_params)|
    context = gateway_request.env[Datadog::AppSec::Ext::CONTEXT_KEY]

    persistent_data = {
      'server.request.path_params' => gateway_route_params.params
    }

    result = context.run_waf(persistent_data, {}, Datadog.configuration.appsec.waf_timeout)

    if result.match?
      Datadog::AppSec::Event.tag_and_keep!(context, result)

      context.events << {
        waf_result: result,
        trace: context.trace,
        span: context.span,
        request: gateway_request,
        actions: result.actions
      }

      Datadog::AppSec::ActionsHandler.handle(result.actions)
    end

    stack.call(gateway_request.request)
  end
end