public async Task <IActionResult> List(
[HttpTrigger(AuthorizationLevel.Anonymous, "get", Route = "managedSecrets")] HttpRequest req,
ILogger log)
{
if (!req.IsValidUser())
{
return(new UnauthorizedResult());
}
log.LogInformation("Listing all Managed Secrets.");
return(new OkObjectResult((await ManagedSecrets.ListAsync()).Select(s => GetViewModel(s))));
}
public async Task <IActionResult> Run(
[HttpTrigger(AuthorizationLevel.Anonymous, "get", Route = "dashboard")] HttpRequest req,
ClaimsPrincipal claimsPrincipal,
ILogger log)
{
if (!req.IsValidUser())
{
return(new UnauthorizedResult());
}
log.LogInformation("Requested Dashboard metrics");
var allSecrets = await ManagedSecrets.ListAsync();
var allResources = await Resources.ListAsync();
var allTasks = await RekeyingTasks.ListAsync();
var expiringInNextWeek = allSecrets.Where(s => DateTimeOffset.UtcNow.AddDays(7) < (s.LastChanged + s.ValidPeriod));
var expired = allSecrets.Where(s => !s.IsValid);
var metrics = new DashboardMetricsViewModel()
{
SignedInName =
claimsPrincipal.FindFirst(ClaimTypes.GivenName)?.Value +
" " +
claimsPrincipal.FindFirst(ClaimTypes.Surname)?.Value,
SignedInEmail = claimsPrincipal.FindFirst(ClaimTypes.Email)?.Value,
SignedInRole = AuthJanitorRoleExtensions.GetUserRole(req),
TotalResources = allResources.Count,
TotalSecrets = allSecrets.Count,
TotalPendingApproval = allTasks.Where(t =>
t.ConfirmationType.HasFlag(TaskConfirmationStrategies.AdminCachesSignOff) ||
t.ConfirmationType.HasFlag(TaskConfirmationStrategies.AdminSignsOffJustInTime)).Count(),
TotalExpiringSoon = expiringInNextWeek.Count(),
TotalExpired = expired.Count(),
ExpiringSoon = expiringInNextWeek.Select(s => GetViewModel(s)),
PercentExpired = (int)((double)expired.Count() / allSecrets.Count) * 100,
TasksInError = allTasks.Count(t => t.RekeyingFailed)
};
foreach (var secret in allSecrets)
{
var riskScore = 0;
foreach (var resourceId in secret.ResourceIds)
{
var resource = allResources.FirstOrDefault(r => r.ObjectId == resourceId);
var provider = GetProvider(new RekeyingAttemptLogger(log), resource.ProviderType, resource.ProviderConfiguration);
riskScore += provider.GetRisks(secret.ValidPeriod).Sum(r => r.Score);
}
if (riskScore > 85)
{
metrics.RiskOver85++;
}
else if (riskScore > 60)
{
metrics.Risk85++;
}
else if (riskScore > 35)
{
metrics.Risk60++;
}
else if (riskScore > 0)
{
metrics.Risk35++;
}
else if (riskScore == 0)
{
metrics.Risk0++;
}
}
return(new OkObjectResult(metrics));
}
