app.js

'use strict';

class AppBootHook {
  constructor(app) {
    this.app = app;
  }

  async checkResisQueue() {
    const { redis, config: { packageQueueKey } } = this.app;
    const { service: { redis: rdis, alarm } } = this.app.createAnonymousContext();

    while (true) {
      const pkgInfo = await redis.lpop(packageQueueKey);
      if (pkgInfo) {
        this.app.logger.info(`start handle package: ${pkgInfo}...`);
        try {
          const { appId, agentId, packagePath, timestamp } = JSON.parse(pkgInfo);
          // check timestamp
          if (Date.now() - timestamp < 60 * 60 * 1000) {
            const result = await rdis.checkModuleRisk(appId, agentId, packagePath, { forceCache: true });
            if (result && result.risk) {
              const context = Object.assign({}, result.risk, result.risk.vulnerabilities);
              await alarm.judgeMetrics(appId, agentId, context, 'xtransit_notification');
              this.app.logger.info(`package: ${pkgInfo} audit saved.`);
            }
          } else {
            this.app.logger.error(`${pkgInfo} has been expired.`);
          }
        } catch (err) {
          this.app.logger.error(`handle package ${pkgInfo} failed: ${err.message}`);
          await redis.rpush(packageQueueKey, pkgInfo);
        }
      }

      const left = await redis.llen(packageQueueKey);
      if (left) {
        // sleep for 1s if queue is not empty
        await new Promise(resolve => setTimeout(resolve, 1 * 1000));
      } else {
        // sleep for 10s if queue is empty
        await new Promise(resolve => setTimeout(resolve, 10 * 1000));
      }
    }
  }

  async didReady() {
    setTimeout(() => this.checkResisQueue(), 1000);
  }
}

module.exports = AppBootHook;