Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Logging session Id #183

Open
pascalwilbrink opened this issue Oct 4, 2023 · 0 comments
Open

Logging session Id #183

pascalwilbrink opened this issue Oct 4, 2023 · 0 comments
Labels
enhancement New feature or request

Comments

@pascalwilbrink
Copy link
Member

Currently the session id is logged directly (on debug level).

This allows a malicious user to hijack the session.

We could change the logging of the session id for a trace and/or span id.
We could also look into a distributed tracing mechanism, since multiple services are being called from the same frontend.
The distributed tracing mechanism can show insights on potential bottlenecks and can show an audit log of what a user has done between a specific timespan.

Examples of distributed tracing mechanisms:

  • Zipkin
  • Jaeger
  • Elastic(?)
  • OpenTelemetry
@pascalwilbrink pascalwilbrink added the enhancement New feature or request label Oct 4, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Development

No branches or pull requests

1 participant