admin/raven
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Browse Source
This commit is contained in:
John Cardinal
2020-06-01 17:46:53 +00:00
parent 281a4ad9c3
commit a1a4630ec7
1 changed files with 9 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files

58
server/AyaNova/Startup.cs
View File

@@ -62,7 +62,6 @@ namespace AyaNova
{ {
_newLog.LogDebug("Initializing services..."); _newLog.LogDebug("Initializing services...");
_newLog.LogDebug("Profiler"); _newLog.LogDebug("Profiler");
//https://dotnetthoughts.net/using-miniprofiler-in-aspnetcore-webapi/ //https://dotnetthoughts.net/using-miniprofiler-in-aspnetcore-webapi/
services.AddMemoryCache(); services.AddMemoryCache();
@@ -70,61 +69,22 @@ namespace AyaNova
{ {
options.RouteBasePath = "/profiler"; options.RouteBasePath = "/profiler";
//options.ShouldProfile = request => MyShouldThisBeProfiledFunction(request); //options.ShouldProfile = request => MyShouldThisBeProfiledFunction(request);
options.ShouldProfile = request => // options.ShouldProfile = request =>
{ // {
return true; // return true;
}; // };
//options.IgnoredPaths // options.IgnoredPaths.Add("/auth");
options.IgnorePath("/auth").IgnorePath("/user").IgnorePath("/docs");
options.ResultsAuthorize = request => options.ResultsAuthorize = request =>
{ {
// if(request.HttpContext.Items)
//{[AY_ROLES, 0]}
if (request.HttpContext.Items["AY_PROFILER_ALLOWED"] != null) if (request.HttpContext.Items["AY_PROFILER_ALLOWED"] != null)
{
return true; return true;
}
// //Idea: use a query parameter on page link to stats
// //that param is download token, if it's present it tries to validate it and then allow if ok
// //weirdly this gets called on any request not just for the results, so need to check the path first then do the rest I guess or just default to false
// //System.Diagnostics.Debug.WriteLine(request.Path.Value);
// // /profiler/results-index
// // /profiler/results-list
// // /profiler/results-list
// // /profiler/results-list
// // /profiler/results
// if (request.Path.Value.StartsWith("/profiler/results"))
// {
// //someone is requesting the profiler
// //check for a dl token "t" and rehydrate user if found
// //if(request.Query.Count==0) return false;
// if (!request.Query.ContainsKey("t")) return false;
// var token = request.Query["t"];
// using (AyContext ct = ServiceProviderProvider.DBContext)
// {
// var DownloadUser = ct.User.AsNoTracking().SingleOrDefault(z => z.DlKey == token && z.Active == true);
// if (DownloadUser == null) return false;
// //this is necessary because they might have an expired JWT but this would just keep on working without a date check
// //the default is the same timespan as the jwt so it's all good
// var utcNow = new DateTimeOffset(DateTime.Now.ToUniversalTime(), TimeSpan.Zero);
// if (DownloadUser.DlKeyExpire < utcNow.DateTime) return false;
// //Ok, it's allowed, let's go
// return true;
// }
// }
return false; return false;
}; };
// options.ShouldProfile` // options.ShouldProfile`
options.EnableServerTimingHeader = false; // options.EnableServerTimingHeader = false;
options.TrackConnectionOpenClose = false; // options.TrackConnectionOpenClose = false;
// options.ShouldProfile=false; // options.ShouldProfile=false;
}).AddEntityFramework(); }).AddEntityFramework();
@@ -473,7 +433,7 @@ namespace AyaNova
//the default is the same timespan as the jwt so it's all good //the default is the same timespan as the jwt so it's all good
var utcNow = new DateTimeOffset(DateTime.Now.ToUniversalTime(), TimeSpan.Zero); var utcNow = new DateTimeOffset(DateTime.Now.ToUniversalTime(), TimeSpan.Zero);
if (u.DlKeyExpire > utcNow.DateTime) if (u.DlKeyExpire > utcNow.DateTime)
{ {
if (AyaNova.Api.ControllerHelpers.Authorized.HasReadFullRole(u.Roles, AyaType.Metrics)) if (AyaNova.Api.ControllerHelpers.Authorized.HasReadFullRole(u.Roles, AyaType.Metrics))
context.Request.HttpContext.Items["AY_PROFILER_ALLOWED"] = true; context.Request.HttpContext.Items["AY_PROFILER_ALLOWED"] = true;
} }