Skip to content

feat(orb-monitoring): orb monitoring auth service - #1337

Open
vmenge wants to merge 9 commits into
mainfrom
vm/orb-monitoring
Open

feat(orb-monitoring): orb monitoring auth service#1337
vmenge wants to merge 9 commits into
mainfrom
vm/orb-monitoring

Conversation

@vmenge

@vmenge vmenge commented Aug 3, 2026

Copy link
Copy Markdown
Collaborator

skeleton for the service with most functionality implemented
not ready for production, but ready to merge

will wait for backend server to be up for final adjustments

@vmenge
vmenge requested a review from a team as a code owner August 3, 2026 16:55
@worldcoin worldcoin deleted a comment from github-actions Bot Aug 3, 2026
@worldcoin worldcoin deleted a comment from github-actions Bot Aug 3, 2026
Comment thread orb-monitoring-auth/src/server/serve_token.rs
Comment thread orb-monitoring-auth/src/client/mod.rs
Comment on lines +69 to +77

unsafe {
let uid = getuid();
if uid != dd_agent_uid {
bail!(
"user with id {uid} is not allowed to call orb-monitoring-auth-client"
)
}
}

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We can avoid unsafe block here with let uid = nix::unistd::getuid().as_raw();
But this requires a "user" feature in the nix crate.

Or use rustix::process::getuid().as_raw();

}

fn main(&self, _args: &ArgMatches) -> ExitCode {
let result = tokio::runtime::Builder::new_multi_thread()

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why use tokio here? This service has 1 client at most.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants