nanakura/moeka-project
1
0
Fork 0
Code Issues Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

feat(server): new metrics for auth

Browse Source 
- Added a new ObservableGauge for distinct active users to track real active user count, mitigating session row inflation issues.
- Updated the Grafana dashboard to reflect changes, including the removal of redundant WS Connections panel and the addition of new metrics for active sessions and distinct users.
- Improved documentation for verification automation processes, outlining a structured approach to automate verification steps and maintain evidence of tests.
This commit is contained in:
RainbowBird
2026-05-15 18:54:05 +08:00
parent bc69df548e
commit a3a401d79d
10 changed files with 1060 additions and 60 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/server/src/app.ts
+13 -4
View File
@@ -42,6 +42,7 @@ import { resolveRequestAuth } from './libs/request-auth'
import { sessionMiddleware } from './middlewares/auth'
import { emitOtelLog, initOtel } from './otel'
import { registerActiveSessionsGauge } from './otel/gauges/active-sessions'
import { registerDistinctActiveUsersGauge } from './otel/gauges/distinct-active-users'
import { createAdminFluxGrantsRoutes } from './routes/admin/flux-grants'
import { createAuthRoutes } from './routes/auth'
import { createCharacterRoutes } from './routes/characters'
@@ -527,11 +528,19 @@ export async function createApp() {
userDeletionService,
posthog,
})
// Register the cluster-wide ObservableGauge for active sessions. Each
// replica polls the same DB (cached 10s, in-flight coalesced) and the
// dashboard aggregates with avg(), not sum(). See observability-conventions.md.
if (resolved.otel)
// Register the cluster-wide ObservableGauges for sessions / users. Each
// replica polls the same DB (cached 10s, in-flight coalesced); dashboards
// aggregate with avg(), not sum(). See observability-conventions.md.
//
// Both gauges share the same `session` table: `user.active_sessions` is
// `COUNT(*)` (row inflation prone), `user.distinct_active` is
// `COUNT(DISTINCT user_id)` (real active-user count). Comparing the two
// surfaces session-row leakage from missing GC + per-OIDC-token row
// creation.
if (resolved.otel) {
registerActiveSessionsGauge(resolved.otel.auth.activeSessions, resolved.db, resolved.otel.observability.metricReadErrors)
registerDistinctActiveUsersGauge(resolved.otel.auth.distinctActiveUsers, resolved.db, resolved.otel.observability.metricReadErrors)
}
const { app, injectWebSocket } = await buildApp({
auth: resolved.auth,