infisical/backend/src/ee/services/audit-log-stream/custom/custom-provider-factory.ts

import { RawAxiosRequestHeaders } from "axios";

import { request } from "@app/lib/config/request";
import { BadRequestError } from "@app/lib/errors";
import { blockLocalAndPrivateIpAddresses } from "@app/lib/validator";

import { AUDIT_LOG_STREAM_TIMEOUT } from "../../audit-log/audit-log-queue";
import { TLogStreamFactoryStreamLog, TLogStreamFactoryValidateCredentials } from "../audit-log-stream-types";
import { TCustomProviderCredentials } from "./custom-provider-types";

export const CustomProviderFactory = () => {
  const validateCredentials: TLogStreamFactoryValidateCredentials<TCustomProviderCredentials> = async ({
    credentials
  }) => {
    const { url, headers } = credentials;

    await blockLocalAndPrivateIpAddresses(url);

    const streamHeaders: RawAxiosRequestHeaders = { "Content-Type": "application/json" };
    if (headers.length) {
      headers.forEach(({ key, value }) => {
        streamHeaders[key] = value;
      });
    }

    await request
      .post(
        url,
        { ping: "ok" },
        {
          headers: streamHeaders,
          timeout: AUDIT_LOG_STREAM_TIMEOUT,
          signal: AbortSignal.timeout(AUDIT_LOG_STREAM_TIMEOUT)
        }
      )
      .catch((err) => {
        throw new BadRequestError({ message: `Failed to connect with upstream source: ${(err as Error)?.message}` });
      });

    return credentials;
  };

  const streamLog: TLogStreamFactoryStreamLog<TCustomProviderCredentials> = async ({ credentials, auditLog }) => {
    const { url, headers } = credentials;

    await blockLocalAndPrivateIpAddresses(url);

    const streamHeaders: RawAxiosRequestHeaders = { "Content-Type": "application/json" };

    if (headers.length) {
      headers.forEach(({ key, value }) => {
        streamHeaders[key] = value;
      });
    }

    await request.post(url, auditLog, {
      headers: streamHeaders,
      timeout: AUDIT_LOG_STREAM_TIMEOUT,
      signal: AbortSignal.timeout(AUDIT_LOG_STREAM_TIMEOUT)
    });
  };

  return {
    validateCredentials,
    streamLog
  };
};