Module: Datadog::AppSec::Contrib::GraphQL::Gateway::Watcher

Defined in:
lib/datadog/appsec/contrib/graphql/gateway/watcher.rb

Overview

Watcher for Rack gateway events

Class Method Summary collapse

Class Method Details

.watch ⇒ Object 



17
18
19
20
21
 
# File 'lib/datadog/appsec/contrib/graphql/gateway/watcher.rb', line 17

def watch
  gateway = Instrumentation.gateway

  watch_multiplex(gateway)
end

.watch_multiplex(gateway = Instrumentation.gateway) ⇒ Object 



23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
 
# File 'lib/datadog/appsec/contrib/graphql/gateway/watcher.rb', line 23

def watch_multiplex(gateway = Instrumentation.gateway)
  gateway.watch('graphql.multiplex', :appsec) do |stack, gateway_multiplex|
    context = AppSec::Context.active

    if context
      persistent_data = {
        'graphql.server.all_resolvers' => gateway_multiplex.arguments
      }

      result = context.run_waf(persistent_data, {}, Datadog.configuration.appsec.waf_timeout)

      if result.match?
        AppSec::Event.tag_and_keep!(context, result)

        context.events.push(
          AppSec::SecurityEvent.new(result, trace: context.trace, span: context.span)
        )

        AppSec::ActionsHandler.handle(result.actions)
      end
    end

    stack.call(gateway_multiplex.arguments)
  end
end