Class: Datadog::AppSec::Contrib::Rack::RequestBodyMiddleware

Inherits:
Object
  • Object
show all
Defined in:
lib/datadog/appsec/contrib/rack/request_body_middleware.rb

Overview

Rack request body middleware for AppSec This should be inserted just below Rack::JSONBodyParser or legacy Rack::PostBodyContentTypeParser from rack-contrib

Instance Method Summary collapse

Constructor Details

#initialize(app, opt = {}) ⇒ RequestBodyMiddleware

Returns a new instance of RequestBodyMiddleware.



15
16
17
 
# File 'lib/datadog/appsec/contrib/rack/request_body_middleware.rb', line 15

def initialize(app, opt = {})
  @app = app
end

Instance Method Details

#call(env) ⇒ Object 



19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
 
# File 'lib/datadog/appsec/contrib/rack/request_body_middleware.rb', line 19

def call(env)
  context = env[Datadog::AppSec::Ext::CONTEXT_KEY]

  return @app.call(env) unless context

  # TODO: handle exceptions, except for @app.call

  http_response = nil
  block_actions = catch(::Datadog::AppSec::Ext::INTERRUPT) do
    http_response, = Instrumentation.gateway.push('rack.request.body', Gateway::Request.new(env)) do
      @app.call(env)
    end

    nil
  end

  return AppSec::Response.negotiate(env, block_actions).to_rack if block_actions

  http_response
end