8456449071

Committed 27 Mar 2024 05:59PM UTC coverage: 80.223% (-0.09%) from 80.312%

Build # 8456449071

Build Type

Pull #1178

github

Committed by

tolgaOzen

Commit Message

build: version info update

Pull Request Pull Request #1178: feat(authn): improvements logging

Run Details

37 of 60 new or added lines in 1 file covered. (61.67%)

2 existing lines in 1 file now uncovered.

7764 of 9678 relevant lines covered (80.22%)

50.88 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

66.67

/internal/storage/postgres/utils/common.go

package utils

import (
        "context"
        "errors"
        "fmt"
        "log/slog"
        "math"
        "strings"
        "time"

        "go.opentelemetry.io/otel/codes"
        "golang.org/x/exp/rand"

        "go.opentelemetry.io/otel/trace"

        "github.com/Masterminds/squirrel"

        base "github.com/Permify/permify/pkg/pb/base/v1"
)

const (
        BulkEntityFilterTemplate = `
    WITH entities AS (
        (SELECT id, entity_id, entity_type, tenant_id, created_tx_id, expired_tx_id FROM relation_tuples)
        UNION ALL
        (SELECT id, entity_id, entity_type, tenant_id, created_tx_id, expired_tx_id FROM attributes)
    ), filtered_entities AS (
        SELECT DISTINCT ON (entity_id) id, entity_id
        FROM entities
        WHERE tenant_id = '%s'
        AND entity_type = '%s'
        AND %s
        AND %s
    )
    SELECT id, entity_id
    FROM filtered_entities`
)

// SnapshotQuery adds conditions to a SELECT query for checking transaction visibility based on created and expired transaction IDs.
// The query checks if transactions are visible in a snapshot associated with the provided value.
func SnapshotQuery(sl squirrel.SelectBuilder, value uint64) squirrel.SelectBuilder {
        // Convert the value to a string once to reduce redundant calls to fmt.Sprintf.
        valStr := fmt.Sprintf("'%v'::xid8", value)

        // Create a subquery for the snapshot associated with the provided value.
        snapshotQuery := fmt.Sprintf("(select snapshot from transactions where id = %s)", valStr)

        // Create an expression to check if a transaction with a specific created_tx_id is visible in the snapshot.
        visibilityExpr := squirrel.Expr(fmt.Sprintf("pg_visible_in_snapshot(created_tx_id, %s) = true", snapshotQuery))
        // Create an expression to check if the created_tx_id is equal to the provided value.
        createdExpr := squirrel.Expr(fmt.Sprintf("created_tx_id = %s", valStr))
        // Use OR condition for the created expressions.
        createdWhere := squirrel.Or{visibilityExpr, createdExpr}

        // Create an expression to check if a transaction with a specific expired_tx_id is not visible in the snapshot.
        expiredVisibilityExpr := squirrel.Expr(fmt.Sprintf("pg_visible_in_snapshot(expired_tx_id, %s) = false", snapshotQuery))
        // Create an expression to check if the expired_tx_id is equal to zero.
        expiredZeroExpr := squirrel.Expr("expired_tx_id = '0'::xid8")
        // Create an expression to check if the expired_tx_id is not equal to the provided value.
        expiredNotExpr := squirrel.Expr(fmt.Sprintf("expired_tx_id <> %s", valStr))
        // Use AND condition for the expired expressions, checking both visibility and non-equality with value.
        expiredWhere := squirrel.And{squirrel.Or{expiredVisibilityExpr, expiredZeroExpr}, expiredNotExpr}

        // Add the created and expired conditions to the SELECT query.
        return sl.Where(createdWhere).Where(expiredWhere)
}

// snapshotQuery function generates two strings representing conditions to be applied in a SQL query to filter data based on visibility of transactions.
func snapshotQuery(value uint64) (string, string) {
        // Convert the provided value into a string format suitable for our SQL query, formatted as a transaction ID.
        valStr := fmt.Sprintf("'%v'::xid8", value)

        // Create a subquery that fetches the snapshot associated with the transaction ID.
        snapshotQ := fmt.Sprintf("(SELECT snapshot FROM transactions WHERE id = %s)", valStr)

        // Create an expression that checks whether a transaction (represented by 'created_tx_id') is visible in the snapshot.
        visibilityExpr := fmt.Sprintf("pg_visible_in_snapshot(created_tx_id, %s) = true", snapshotQ)
        // Create an expression that checks if the 'created_tx_id' is the same as our transaction ID.
        createdExpr := fmt.Sprintf("created_tx_id = %s", valStr)
        // Combine these expressions to form a condition. A row will satisfy this condition if either of the expressions are true.
        createdWhere := fmt.Sprintf("(%s OR %s)", visibilityExpr, createdExpr)

        // Create an expression that checks whether a transaction (represented by 'expired_tx_id') is not visible in the snapshot.
        expiredVisibilityExpr := fmt.Sprintf("pg_visible_in_snapshot(expired_tx_id, %s) = false", snapshotQ)
        // Create an expression that checks if the 'expired_tx_id' is zero. This handles cases where the transaction hasn't expired.
        expiredZeroExpr := "expired_tx_id = '0'::xid8"
        // Create an expression that checks if the 'expired_tx_id' is not the same as our transaction ID.
        expiredNotExpr := fmt.Sprintf("expired_tx_id <> %s", valStr)
        // Combine these expressions to form a condition. A row will satisfy this condition if the first set of expressions are true (either the transaction hasn't expired, or if it has, it's not visible in the snapshot) and the second expression is also true (the 'expired_tx_id' is not the same as our transaction ID).
        expiredWhere := fmt.Sprintf("(%s AND %s)", fmt.Sprintf("(%s OR %s)", expiredVisibilityExpr, expiredZeroExpr), expiredNotExpr)

        // Return the conditions for both 'created' and 'expired' transactions. These can be used in a WHERE clause of a SQL query to filter results.
        return createdWhere, expiredWhere
}

// BulkEntityFilterQuery -
func BulkEntityFilterQuery(tenantID, entityType string, snap uint64) string {
        createdWhere, expiredWhere := snapshotQuery(snap)
        return fmt.Sprintf(BulkEntityFilterTemplate, tenantID, entityType, createdWhere, expiredWhere)
}

// GenerateGCQuery generates a Squirrel DELETE query builder for garbage collection.
// It constructs a query to delete expired records from the specified table
// based on the provided value, which represents a transaction ID.
func GenerateGCQuery(table string, value uint64) squirrel.DeleteBuilder {
        // Convert the provided value into a string format suitable for our SQL query, formatted as a transaction ID.
        valStr := fmt.Sprintf("'%v'::xid8", value)

        // Create a Squirrel DELETE builder for the specified table.
        deleteBuilder := squirrel.Delete(table)

        // Create an expression to check if 'expired_tx_id' is not equal to '0' (not expired).
        expiredZeroExpr := squirrel.Expr("expired_tx_id <> '0'::xid8")

        // Create an expression to check if 'expired_tx_id' is less than the provided value (before the cutoff).
        beforeExpr := squirrel.Expr(fmt.Sprintf("expired_tx_id < %s", valStr))

        // Add the WHERE clauses to the DELETE query builder to filter and delete expired data.
        return deleteBuilder.Where(expiredZeroExpr).Where(beforeExpr)
}

// HandleError records an error in the given span, logs the error, and returns a standardized error.
// This function is used for consistent error handling across different parts of the application.
func HandleError(ctx context.Context, span trace.Span, err error, errorCode base.ErrorCode) error {
        // Check if the error is context-related
        if IsContextRelatedError(ctx, err) || IsSerializationRelatedError(err) {
                // Use debug level logging for context or serialization-related errors
                slog.Debug("an error related to context or serialization was encountered during the operation", slog.String("error", err.Error()))
        } else {
                span.RecordError(err)
                span.SetStatus(codes.Error, err.Error())
                // Use error level logging for all other errors
                slog.Error("error encountered", slog.Any("error", err))
        }

        // Return a new standardized error with the provided error code
        return errors.New(errorCode.String())
}

// IsContextRelatedError checks if the error is due to context cancellation, deadline exceedance, or closed connection
func IsContextRelatedError(ctx context.Context, err error) bool {
        if errors.Is(ctx.Err(), context.Canceled) || errors.Is(ctx.Err(), context.DeadlineExceeded) {
                return true
        }
        if errors.Is(err, context.Canceled) ||
                errors.Is(err, context.DeadlineExceeded) ||
                strings.Contains(err.Error(), "conn closed") {
                return true
        }
        return false
}

// IsSerializationRelatedError checks if the error is a serialization failure, typically in database transactions.
func IsSerializationRelatedError(err error) bool {
        if strings.Contains(err.Error(), "could not serialize") ||
                strings.Contains(err.Error(), "duplicate key value") {
                return true
        }
        return false
}

// WaitWithBackoff implements an exponential backoff strategy with jitter for retries.
// It waits for a calculated duration or until the context is cancelled, whichever comes first.
func WaitWithBackoff(ctx context.Context, tenantID string, retries int) {
        backoff := time.Duration(math.Min(float64(20*time.Millisecond)*math.Pow(2, float64(retries)), float64(1*time.Second)))
        jitter := time.Duration(rand.Float64() * float64(backoff) * 0.5)
        nextBackoff := backoff + jitter
        slog.Warn("waiting before retry", slog.String("tenant_id", tenantID), slog.Int64("backoff_duration", nextBackoff.Milliseconds()))
        select {
        case <-time.After(nextBackoff):
        case <-ctx.Done():
        }
}

1	package utils
2
3	import (
4	"context"
5	"errors"
6	"fmt"
7	"log/slog"
8	"math"
9	"strings"
10	"time"
11
12	"go.opentelemetry.io/otel/codes"
13	"golang.org/x/exp/rand"
14
15	"go.opentelemetry.io/otel/trace"
16
17	"github.com/Masterminds/squirrel"
18
19	base "github.com/Permify/permify/pkg/pb/base/v1"
20	)
21
22	const (
23	BulkEntityFilterTemplate = `
24	WITH entities AS (
25	(SELECT id, entity_id, entity_type, tenant_id, created_tx_id, expired_tx_id FROM relation_tuples)
26	UNION ALL
27	(SELECT id, entity_id, entity_type, tenant_id, created_tx_id, expired_tx_id FROM attributes)
28	), filtered_entities AS (
29	SELECT DISTINCT ON (entity_id) id, entity_id
30	FROM entities
31	WHERE tenant_id = '%s'
32	AND entity_type = '%s'
33	AND %s
34	AND %s
35	)
36	SELECT id, entity_id
37	FROM filtered_entities`
38	)
39
40	// SnapshotQuery adds conditions to a SELECT query for checking transaction visibility based on created and expired transaction IDs.
41	// The query checks if transactions are visible in a snapshot associated with the provided value.
42	func SnapshotQuery(sl squirrel.SelectBuilder, value uint64) squirrel.SelectBuilder {	1✔
43	// Convert the value to a string once to reduce redundant calls to fmt.Sprintf.	1✔
44	valStr := fmt.Sprintf("'%v'::xid8", value)	1✔
45		1✔
46	// Create a subquery for the snapshot associated with the provided value.	1✔
47	snapshotQuery := fmt.Sprintf("(select snapshot from transactions where id = %s)", valStr)	1✔
48		1✔
49	// Create an expression to check if a transaction with a specific created_tx_id is visible in the snapshot.	1✔
50	visibilityExpr := squirrel.Expr(fmt.Sprintf("pg_visible_in_snapshot(created_tx_id, %s) = true", snapshotQuery))	1✔
51	// Create an expression to check if the created_tx_id is equal to the provided value.	1✔
52	createdExpr := squirrel.Expr(fmt.Sprintf("created_tx_id = %s", valStr))	1✔
53	// Use OR condition for the created expressions.	1✔
54	createdWhere := squirrel.Or{visibilityExpr, createdExpr}	1✔
55		1✔
56	// Create an expression to check if a transaction with a specific expired_tx_id is not visible in the snapshot.	1✔
57	expiredVisibilityExpr := squirrel.Expr(fmt.Sprintf("pg_visible_in_snapshot(expired_tx_id, %s) = false", snapshotQuery))	1✔
58	// Create an expression to check if the expired_tx_id is equal to zero.	1✔
59	expiredZeroExpr := squirrel.Expr("expired_tx_id = '0'::xid8")	1✔
60	// Create an expression to check if the expired_tx_id is not equal to the provided value.	1✔
61	expiredNotExpr := squirrel.Expr(fmt.Sprintf("expired_tx_id <> %s", valStr))	1✔
62	// Use AND condition for the expired expressions, checking both visibility and non-equality with value.	1✔
63	expiredWhere := squirrel.And{squirrel.Or{expiredVisibilityExpr, expiredZeroExpr}, expiredNotExpr}	1✔
64		1✔
65	// Add the created and expired conditions to the SELECT query.	1✔
66	return sl.Where(createdWhere).Where(expiredWhere)	1✔
67	}	1✔
68
69	// snapshotQuery function generates two strings representing conditions to be applied in a SQL query to filter data based on visibility of transactions.
70	func snapshotQuery(value uint64) (string, string) {	1✔
71	// Convert the provided value into a string format suitable for our SQL query, formatted as a transaction ID.	1✔
72	valStr := fmt.Sprintf("'%v'::xid8", value)	1✔
73		1✔
74	// Create a subquery that fetches the snapshot associated with the transaction ID.	1✔
75	snapshotQ := fmt.Sprintf("(SELECT snapshot FROM transactions WHERE id = %s)", valStr)	1✔
76		1✔
77	// Create an expression that checks whether a transaction (represented by 'created_tx_id') is visible in the snapshot.	1✔
78	visibilityExpr := fmt.Sprintf("pg_visible_in_snapshot(created_tx_id, %s) = true", snapshotQ)	1✔
79	// Create an expression that checks if the 'created_tx_id' is the same as our transaction ID.	1✔
80	createdExpr := fmt.Sprintf("created_tx_id = %s", valStr)	1✔
81	// Combine these expressions to form a condition. A row will satisfy this condition if either of the expressions are true.	1✔
82	createdWhere := fmt.Sprintf("(%s OR %s)", visibilityExpr, createdExpr)	1✔
83		1✔
84	// Create an expression that checks whether a transaction (represented by 'expired_tx_id') is not visible in the snapshot.	1✔
85	expiredVisibilityExpr := fmt.Sprintf("pg_visible_in_snapshot(expired_tx_id, %s) = false", snapshotQ)	1✔
86	// Create an expression that checks if the 'expired_tx_id' is zero. This handles cases where the transaction hasn't expired.	1✔
87	expiredZeroExpr := "expired_tx_id = '0'::xid8"	1✔
88	// Create an expression that checks if the 'expired_tx_id' is not the same as our transaction ID.	1✔
89	expiredNotExpr := fmt.Sprintf("expired_tx_id <> %s", valStr)	1✔
90	// Combine these expressions to form a condition. A row will satisfy this condition if the first set of expressions are true (either the transaction hasn't expired, or if it has, it's not visible in the snapshot) and the second expression is also true (the 'expired_tx_id' is not the same as our transaction ID).	1✔
91	expiredWhere := fmt.Sprintf("(%s AND %s)", fmt.Sprintf("(%s OR %s)", expiredVisibilityExpr, expiredZeroExpr), expiredNotExpr)	1✔
92		1✔
93	// Return the conditions for both 'created' and 'expired' transactions. These can be used in a WHERE clause of a SQL query to filter results.	1✔
94	return createdWhere, expiredWhere	1✔
95	}	1✔
96
97	// BulkEntityFilterQuery -
98	func BulkEntityFilterQuery(tenantID, entityType string, snap uint64) string {	1✔
99	createdWhere, expiredWhere := snapshotQuery(snap)	1✔
100	return fmt.Sprintf(BulkEntityFilterTemplate, tenantID, entityType, createdWhere, expiredWhere)	1✔
101	}	1✔
102
103	// GenerateGCQuery generates a Squirrel DELETE query builder for garbage collection.
104	// It constructs a query to delete expired records from the specified table
105	// based on the provided value, which represents a transaction ID.
106	func GenerateGCQuery(table string, value uint64) squirrel.DeleteBuilder {	1✔
107	// Convert the provided value into a string format suitable for our SQL query, formatted as a transaction ID.	1✔
108	valStr := fmt.Sprintf("'%v'::xid8", value)	1✔
109		1✔
110	// Create a Squirrel DELETE builder for the specified table.	1✔
111	deleteBuilder := squirrel.Delete(table)	1✔
112		1✔
113	// Create an expression to check if 'expired_tx_id' is not equal to '0' (not expired).	1✔
114	expiredZeroExpr := squirrel.Expr("expired_tx_id <> '0'::xid8")	1✔
115		1✔
116	// Create an expression to check if 'expired_tx_id' is less than the provided value (before the cutoff).	1✔
117	beforeExpr := squirrel.Expr(fmt.Sprintf("expired_tx_id < %s", valStr))	1✔
118		1✔
119	// Add the WHERE clauses to the DELETE query builder to filter and delete expired data.	1✔
120	return deleteBuilder.Where(expiredZeroExpr).Where(beforeExpr)	1✔
121	}	1✔
122
123	// HandleError records an error in the given span, logs the error, and returns a standardized error.
124	// This function is used for consistent error handling across different parts of the application.
125	func HandleError(ctx context.Context, span trace.Span, err error, errorCode base.ErrorCode) error {	×
126	// Check if the error is context-related	×
127	if IsContextRelatedError(ctx, err) \|\| IsSerializationRelatedError(err) {	×
128	// Use debug level logging for context or serialization-related errors	×
129	slog.Debug("an error related to context or serialization was encountered during the operation", slog.String("error", err.Error()))	×
130	} else {	×
131	span.RecordError(err)	×
132	span.SetStatus(codes.Error, err.Error())	×
133	// Use error level logging for all other errors	×
134	slog.Error("error encountered", slog.Any("error", err))	×
135	}	×
136
137	// Return a new standardized error with the provided error code
138	return errors.New(errorCode.String())	×
139	}
140
141	// IsContextRelatedError checks if the error is due to context cancellation, deadline exceedance, or closed connection
142	func IsContextRelatedError(ctx context.Context, err error) bool {	×
143	if errors.Is(ctx.Err(), context.Canceled) \|\| errors.Is(ctx.Err(), context.DeadlineExceeded) {	×
144	return true	×
145	}	×
146	if errors.Is(err, context.Canceled) \|\|	×
147	errors.Is(err, context.DeadlineExceeded) \|\|	×
148	strings.Contains(err.Error(), "conn closed") {	×
149	return true	×
150	}	×
151	return false	×
152	}
153
154	// IsSerializationRelatedError checks if the error is a serialization failure, typically in database transactions.
155	func IsSerializationRelatedError(err error) bool {	×
156	if strings.Contains(err.Error(), "could not serialize") \|\|	×
157	strings.Contains(err.Error(), "duplicate key value") {	×
158	return true	×
159	}	×
160	return false	×
161	}
162
163	// WaitWithBackoff implements an exponential backoff strategy with jitter for retries.
164	// It waits for a calculated duration or until the context is cancelled, whichever comes first.
165	func WaitWithBackoff(ctx context.Context, tenantID string, retries int) {	×
166	backoff := time.Duration(math.Min(float64(20time.Millisecond)math.Pow(2, float64(retries)), float64(1*time.Second)))	×
167	jitter := time.Duration(rand.Float64() * float64(backoff) * 0.5)	×
168	nextBackoff := backoff + jitter	×
169	slog.Warn("waiting before retry", slog.String("tenant_id", tenantID), slog.Int64("backoff_duration", nextBackoff.Milliseconds()))	×
170	select {	×
171	case <-time.After(nextBackoff):	×
172	case <-ctx.Done():	×
173	}
174	}

Permify / permify / 8456449071

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous