4a2afc68bf
Eliminat zgomotul de trasabilitate (US-xxx, PRD x.x, Rn, OV-x, Tn, decizii/naratiune istorica) din 41 fisiere app/ + template-uri. Pastrate comentariile care documenteaza invarianti si logica ne-evidenta (idempotenta/hash, reconciliere anti-duplicat, RAR 500 esec definitiv, creds per cont, WAF User-Agent, 422 fara echo de parola, scope NULL->1), curatate doar de tokeni. Verificare: pentru cele 27 module .py curatate, structura de cod (tokeni non-comentariu/ non-string) e IDENTICA fata de HEAD -> doar comentarii/docstring-uri schimbate. Singura schimbare de cod e in tests/test_web_responsive.py (scos 3 assert pe markeri US-006/007/008, inlocuite de asertiunile structurale alaturate). 0 tokeni US/PRD reziduali in app/. Regresie: 896 passed, 1 deselected. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
34 lines
1.3 KiB
Python
34 lines
1.3 KiB
Python
"""Middleware HTTP: request_id per cerere.
|
|
|
|
Fiecare raspuns primeste un header `X-Request-ID` (generat daca clientul nu trimite
|
|
unul). Pe durata cererii, id-ul e disponibil prin `observ.request_id_var` (contextvar)
|
|
in handlerul de erori si in `log_event` — fara a polua semnaturile.
|
|
|
|
Format opac, fara PII: `secrets.token_hex(8)` (16 hex). Daca clientul trimite un
|
|
`X-Request-ID`, il pastram (corelare end-to-end), dar il scurtam defensiv (max 64).
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import secrets
|
|
|
|
from starlette.middleware.base import BaseHTTPMiddleware
|
|
from starlette.requests import Request
|
|
|
|
from ..observ import request_id_var
|
|
|
|
|
|
class RequestIDMiddleware(BaseHTTPMiddleware):
|
|
async def dispatch(self, request: Request, call_next):
|
|
incoming = request.headers.get("X-Request-ID")
|
|
request_id = (incoming.strip()[:64] if incoming and incoming.strip() else secrets.token_hex(8))
|
|
token = request_id_var.set(request_id)
|
|
# Expune si pe request.state pentru handlerele care prefera accesul explicit.
|
|
request.state.request_id = request_id
|
|
try:
|
|
response = await call_next(request)
|
|
finally:
|
|
request_id_var.reset(token)
|
|
response.headers["X-Request-ID"] = request_id
|
|
return response
|