package web import ( "encoding/base64" "fmt" "io" "net/http" "os" "path" "github.com/gorilla/mux" "github.com/gorilla/securecookie" "github.com/prometheus/client_golang/prometheus" "github.com/prometheus/client_golang/prometheus/promauto" "github.com/prometheus/client_golang/prometheus/promhttp" log "github.com/sirupsen/logrus" "goauthentik.io/internal/config" "goauthentik.io/internal/utils/sentry" ) const MetricsKeyFile = "authentik-core-metrics.key" var Requests = promauto.NewHistogramVec(prometheus.HistogramOpts{ Name: "authentik_main_request_duration_seconds", Help: "API request latencies in seconds", }, []string{"dest"}) func (ws *WebServer) runMetricsServer() { l := log.WithField("logger", "authentik.router.metrics") tmp := os.TempDir() key := base64.StdEncoding.EncodeToString(securecookie.GenerateRandomKey(64)) keyPath := path.Join(tmp, MetricsKeyFile) err := os.WriteFile(keyPath, []byte(key), 0o600) if err != nil { l.WithError(err).Warning("failed to save metrics key") return } m := mux.NewRouter() m.Use(sentry.SentryNoSampleMiddleware) m.Path("/metrics").HandlerFunc(func(rw http.ResponseWriter, r *http.Request) { promhttp.InstrumentMetricHandler( prometheus.DefaultRegisterer, promhttp.HandlerFor(prometheus.DefaultGatherer, promhttp.HandlerOpts{ DisableCompression: true, }), ).ServeHTTP(rw, r) // Get upstream metrics re, err := http.NewRequest("GET", fmt.Sprintf("%s/-/metrics/", ws.ul.String()), nil) if err != nil { l.WithError(err).Warning("failed to get upstream metrics") return } re.Header.Set("Authorization", fmt.Sprintf("Bearer %s", key)) res, err := ws.upstreamHttpClient().Do(re) if err != nil { l.WithError(err).Warning("failed to get upstream metrics") return } _, err = io.Copy(rw, res.Body) if err != nil { l.WithError(err).Warning("failed to get upstream metrics") return } }) l.WithField("listen", config.Get().Listen.Metrics).Info("Starting Metrics server") err = http.ListenAndServe(config.Get().Listen.Metrics, m) if err != nil { l.WithError(err).Warning("Failed to start metrics server") } l.WithField("listen", config.Get().Listen.Metrics).Info("Stopping Metrics server") err = os.Remove(keyPath) if err != nil { l.WithError(err).Warning("failed to remove metrics key file") } }