pam: return metadata for pam access requests

backend/src/ee/routes/v1/pam-account-routers/pam-account-router.ts

@@ -92,7 +92,8 @@ export const registerPamAccountRouter = async (server: FastifyZodProvider) => {
           gatewayClientCertificate: z.string(),
           gatewayClientPrivateKey: z.string(),
           gatewayServerCertificateChain: z.string(),
-          relayHost: z.string()
+          relayHost: z.string(),
+          metadata: z.record(z.string(), z.string()).optional()
         })
       }
     },

backend/src/ee/services/pam-account/pam-account-service.ts

@@ -480,6 +480,30 @@ export const pamAccountServiceFactory = ({
       throw new NotFoundError({ message: `Gateway connection details for gateway '${gatewayId}' not found.` });
     }
 
+    let metadata;
+
+    switch (resourceType) {
+      case PamResource.Postgres:
+      case PamResource.MySQL: {
+        const connectionCredentials = await decryptResourceConnectionDetails({
+          encryptedConnectionDetails: resource.encryptedConnectionDetails,
+          kmsService,
+          projectId: account.projectId
+        });
+
+        const credentials = await decryptAccountCredentials({
+          encryptedCredentials: account.encryptedCredentials,
+          kmsService,
+          projectId: account.projectId
+        });
+
+        metadata = {
+          username: credentials.username,
+          database: connectionCredentials.database
+        };
+      }
+    }
+
     return {
       sessionId: session.id,
       resourceType,
@@ -491,7 +515,8 @@ export const pamAccountServiceFactory = ({
       gatewayServerCertificateChain: gatewayConnectionDetails.gateway.serverCertificateChain,
       relayHost: gatewayConnectionDetails.relayHost,
       projectId: account.projectId,
-      account
+      account,
+      metadata
     };
   };