Logovanie a ladenie Web API

Start read sql - InputParams: @{SelDivision_IDFrag}=('1300000101','1400000101','3400000101','2400000101','2200000101','1200000101','2100000101');@{SelStore_IDFrag}=('1300000101','2600000101','3400000101','1600000101','3200000101','4400000101','1500000101','2500000101','3500000101','2300000101','3300000101','2100000101');@{$IndexAndWhere}=;
				select T_1.StoreCard_ID as F_1$REFERENCE, T_1.Store_ID as F_2$REFERENCE, sum(T_1.Quantity) as F_3, sum(T_1.DeliveredQuantity) as F_4, T_1.StoreCard_ID as F_5, T_1.Store_ID as F_6
				from ReceivedOrders2 T_1
				left join ReceivedOrders T_2 on T_2.ID = T_1.Parent_ID
				where (T_1.Store_ID in ('2100000101', '2200000101') and T_1.RowType = 3 and T_2.Confirmed = 'A' and T_2.Closed = 'N' and T_1.Quantity > T_1.DeliveredQuantity) and (((T_1.Division_ID IS NULL) OR (T_1.Division_ID = '0000000000') OR (T_1.Division_ID = ' ') OR (T_1.Division_ID IN {SelDivision_IDFrag}))) and (((T_1.Store_ID IS NULL) OR (T_1.Store_ID = '0000000000') OR (T_1.Store_ID = ' ') OR (T_1.Store_ID IN {SelStore_IDFrag})))
				group by F_5, F_6
  
		SQL plan: PLAN JOIN (T_1 ORDER RECEIVEDORDERS2_SCARD INDEX (RECEIVEDORDERS2STOREFK, RECEIVEDORDERS2STOREFK), T_2 INDEX (RECEIVEDORDERSPK))

Začiatok čítania sql - InputParams: @{SelDivision_IDFrag}=('1300000101','1400000101','3400000101','2400000101','2200000101','1200000101','2100000101');@{SelStore_IDFrag}=('1300000101','2600000101','1600000101','3400000101','3200000101','4400000101','1500000101','2500000101','3500000101','2300000101','3300000101','2100000101');@{$IndexAndWhere}=;
				select T_1.StoreCard_ID as F_1$REFERENCE, T_1.Store_ID as F_2$REFERENCE, sum(T_1.Quantity) as F_3, sum(T_1.DeliveredQuantity) as F_4, T_1.StoreCard_ID as F_5, T_1.Store_ID as F_6
				from ReceivedOrders2 T_1
				join ReceivedOrders T_2 on T_2.ID = T_1.Parent_ID
				where (T_1.Store_ID in ('2100000101', '2200000101') and T_1.RowType = 3 and T_2.Confirmed = 'A' and T_2.Closed = 'N' and T_1.Quantity > T_1.DeliveredQuantity) and (((T_1.Division_ID IS NULL) OR (T_1.Division_ID = '0000000000') OR (T_1.Division_ID = ' ') OR (T_1.Division_ID IN {SelDivision_IDFrag}))) and (((T_1.Store_ID IS NULL) OR (T_1.Store_ID = '0000000000') OR (T_1.Store_ID = ' ') OR (T_1.Store_ID IN {SelStore_IDFrag})))
				group by T_1.StoreCard_ID, T_1.Store_ID
  
				SQL plán:   |--Stream Aggregate(GROUP BY:([T_1].[StoreCard_ID]) DEFINE:([Expr1002]=SUM([toho].[dbo].[ReceivedOrders2].[Quantity] as [T_1].[Quantity]), [Expr1003]=SUM([toho].[dbo].[ReceivedOrders2].[DeliveredQuantity] as [T_1].[DeliveredQuantity]), [T_1].[Store_ID]=ANY([toho].[dbo].[ReceivedOrders2].[Store_ID] as [T_1].[Store_ID])))
				|--Sort(ORDER BY:([T_1].[StoreCard_ID] ASC))
				|--Nested Loops(Inner Join, OUTER REFERENCES:([T_1].[Parent_ID]))
				|--Clustered Index Scan(OBJECT:([toho].[dbo].[ReceivedOrders2].[ReceivedOrders2PK] AS [T_1]), WHERE:([toho].[dbo].[ReceivedOrders2].[RowType] as [T_1].[RowType]=(3) AND [toho].[dbo].[ReceivedOrders2].[Quantity] as [T_1].[Quantity]>[toho].[dbo].[ReceivedOrders2].[DeliveredQuantity] as [T_1].[DeliveredQuantity] AND [toho].[dbo].[ReceivedOrders2].[Store_ID] as [T_1].[Store_ID]='2100000101' AND ([toho].[dbo].[ReceivedOrders2].[Division_ID] as [T_1].[Division_ID]=' ' OR [toho].[dbo].[ReceivedOrders2].[Division_ID] as [T_1].[Division_ID]='0000000000' OR [toho].[dbo].[ReceivedOrders2].[Division_ID] as [T_1].[Division_ID]='1200000101' OR [toho].[dbo].[ReceivedOrders2].[Division_ID] as [T_1].[Division_ID]='1300000101' OR [toho].[dbo].[ReceivedOrders2].[Division_ID] as [T_1].[Division_ID]='1400000101' OR [toho].[dbo].[ReceivedOrders2].[Division_ID] as [T_1].[Division_ID]='2100000101' OR [toho].[dbo].[ReceivedOrders2].[Division_ID] as [T_1].[Division_ID]='2200000101' OR [toho].[dbo].[ReceivedOrders2].[Division_ID] as [T_1].[Division_ID]='2400000101' OR [toho].[dbo].[ReceivedOrders2].[Division_ID] as [T_1].[Division_ID]='3400000101')))
		|--Clustered Index Seek(OBJECT:([toho].[dbo].[ReceivedOrders].[ReceivedOrdersPK] AS [T_2]), SEEK:([T_2].[ID]=[toho].[dbo].[ReceivedOrders2].[Parent_ID] as [T_1].[Parent_ID]),  WHERE:([toho].[dbo].[ReceivedOrders].[Confirmed] as [T_2].[Confirmed]='A' AND [toho].[dbo].[ReceivedOrders].[Closed] as [T_2].[Closed]='N') ORDERED FORWARD)

Spustenie čítania sql - InputParams: @{SelDivision_IDFrag}=('1300000101','1400000101','3400000101','2400000101','2200000101','1200000101','1500000101','2100000101');@{SelStore_IDFrag}=('1620000101','1600000101','3200000101','4400000101','2300000101','3300000101','1300000101','2600000101','3400000101','1500000101','2500000101','3500000101','2100000101');@{$IndexAndWhere}=;
				select T_1.StoreCard_ID as F_1$REFERENCE, T_1.Store_ID as F_2$REFERENCE, sum(T_1.Quantity) as F_3, sum(T_1.DeliveredQuantity) as F_4, T_1.StoreCard_ID as F_5, T_1.Store_ID as F_6
				from ReceivedOrders2 T_1
				join ReceivedOrders T_2 on T_2.ID = T_1.Parent_ID
				where (T_1.Store_ID in ('2100000101', '2200000101') and T_1.RowType = 3 and T_2.Confirmed = 'A' and T_2.Closed = 'N' and T_1.Quantity > T_1.DeliveredQuantity) and (((T_1.Division_ID IS NULL) OR (T_1.Division_ID = '0000000000') OR (T_1.Division_ID = ' ') OR (T_1.Division_ID IN {SelDivision_IDFrag}))) and (((T_1.Store_ID IS NULL) OR (T_1.Store_ID = '0000000000') OR (T_1.Store_ID = ' ') OR (T_1.Store_ID IN {SelStore_IDFrag})))
				group by T_1.StoreCard_ID, T_1.Store_ID
  
				SQL plán: Hodnota hash plánu: 2830092148
  
				---------------------------------------------------------------------------------------------------------------
				| Id  | Operácia                     | Názov                         | Riadky | Bajty | Náklady (%CPU)| Čas      |
				---------------------------------------------------------------------------------------------------------------
				|   0 | SELECT STATEMENT              |                               |     1 |    64 |     6  (17)| 00:00:01 |
				|   1 |  HASH GROUP BY                |                               |     1 |    64 |     6  (17)| 00:00:01 |
				|   2 |   NESTED LOOPS                |                               |     1 |    64 |     5   (0)| 00:00:01 |
				|   3 |    NESTED LOOPS               |                               |     4 |    64 |     5   (0)| 00:00:01 |
				|*  4 |     TABLE ACCESS FULL         | RECEIVEDORDERS                |     1 |    15 |     4   (0)| 00:00:01 |
				|*  5 |     INDEX RANGE SCAN          | IX_WS4K5TC4FSM43JGFVBMIIWSEXK |     4 |       |     0   (0)| 00:00:01 |
				|*  6 |    TABLE ACCESS BY INDEX ROWID| RECEIVEDORDERS2               |     2 |    98 |     1   (0)| 00:00:01 |
				---------------------------------------------------------------------------------------------------------------
  
				Informácie o predikáte (identifikované podľa id operácie):
				---------------------------------------------------
  
				4 - filter("T_2"."CONFIRMED"='A' AND "T_2"."CLOSED"='N')
				5 - access("T_2"."ID"="T_1"."PARENT_ID")
				6 - filter("T_1"."QUANTITY">"T_1"."DELIVEREDQUANTITY" AND "T_1"."ROWTYPE"=3 AND ("T_1"."STORE_ID" 
				IS NULL OR "T_1"."STORE_ID"='2100000101') AND ("T_1"."STORE_ID"='2100000101' OR 
				"T_1"."STORE_ID"='2200000101') AND ("T_1"."DIVISION_ID"=' ' OR "T_1"."DIVISION_ID"='0000000000' OR 
				"T_1"."DIVISION_ID"='1200000101' OR "T_1"."DIVISION_ID"='1300000101' OR 
				"T_1"."DIVISION_ID"='1400000101' OR "T_1"."DIVISION_ID"='1500000101' OR 
				"T_1"."DIVISION_ID"='2100000101' OR "T_1"."DIVISION_ID"='2200000101' OR 
		"T_1"."DIVISION_ID"='2400000101' OR "T_1"."DIVISION_ID"='3400000101'))

Stránka načítaná z http://toho-ntb3.local:8000/cors-demo.html

apiserver beží na http://localhost

browser je tiež na localhost

Pretože pre origin adresu, odkiaľ sa spúšťajú skripty (http://toho-ntb3.local:8000), nie sú nastavené v konfigurácii yaml žiadne pravidlá, je prístup k tomuto origin odmietnutý.

Log - Odmietnutý prístup:

[2025-05-27 17:13:52.560 [3] 00000021 (REQUESTSLOGGER) cors preflight on authorized path http://localhost/demo/countries - denied (origin: http://toho-ntb3.local:8000

Authorized path upozorňuje na to, že ide o cestu podliehajúcu autorizácii a origin na miesto, odkiaľ pochádza skript, ktorý request spustil. Pri cestách podliehajúcich autorizácii sa prípadné povolenie vykonania skriptu nastavuje v konfigurácii yaml v sekcii allowedOrigins.

Pre vlastné udelenie oprávnenia rozhoduje celý origin vrátane protokolu. Ako wildcard znak je možné použiť * a to viackrát. Typicky sa používa na začiatku na filtrovanie celej domény, napr. takto:

allowedOrigins:

- "*toho-ntb3.local:8000"

Po nastavení je potrebné apiserver reštartovať. Ideálne skúšať pomocou apiserver.ps1 z príkazového riadku, pretože potom je hneď vidieť, či sa podarilo yaml konfiguráciu načítať. Nezabudnite, že ide o reťazce, a teda musia byť v úvodzovkách.

Log - Povolený prístup:

[2025-05-27 17:32:28.818 [4] 00000022 (REQUESTSLOGGER) cors preflight on authorized path http://localhost/demo/countries - allowed (origin: http://toho-ntb3.local:8000)

V tomto konkrétnom prípade uvidíte v prehliadači pri sledovaní requestov chybu:

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://localhost/demo/countries. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing). Status code: 200.

To, že hlavička Access-Control-Allow-Origin chýba, je problém na strane servera a vyrieši sa konfiguráciou. Avšak môžu nastať aj iné dôvody. Napr. pri dotazoch na cestu, ktorá nevyžaduje autorizáciu (napr. root), vracia apiserver štandardne hlavičku Access-Control-Allow-Origin s hodnotou *. Hodnota * sa ale nesmie použiť súčasne s prihlasovacími údajmi. Ak sa teda na root cestu pošlú aj autorizačné údaje, options zlyhá na túto chybu:

[Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at ‘http://localhost/’. (Reason: Credential is not supported if the CORS header ‘Access-Control-Allow-Origin’ is ‘*’).

Ak sa pokúšame poslať dotaz na neexistujúci api server, dôjde k nasledujúcej chybe.

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://localhost:6543/demo/countries. (Reason: CORS request did not succeed). Status code: (null)

V tomto prípade je vodidlom status code null.

 

Stránka načítaná z http://localhost/demo/script/eu.abra.toho/api/corsdemo

api server beží na http://localhost

Ide o rovnaký origin (miesto localhost môže byť akákoľvek iná doména). V tomto prípade prehliadač CORS preflight requesty nevkladá a vykonáva ich priamo. Ak by však boli použité knižnice tretích strán stiahnuté z iných miest, tak už CORS zafunguje a správca bude musieť rozhodnúť, či povoliť alebo nie.

Je samozrejme možné v konfigurácii použiť * a tým efektívne anulovať akúkoľvek CORS ochranu. To ale nie je odporúčané.

 

Aktuálne sa hlavička Access-Control-Allow-Private-Network v prehliadači Firefox neposiela vôbec a v MS EDGE (a najskôr vo všetkých prehliadačoch založených na Chromiu) len v prípade, že origin (teda odkiaľ pochádza skript vykonávajúci request) smeruje z public adresy na private alebo local adresu. Toto sa teda bude meniť v čase a je to tiež závislé od konkrétneho prehliadača.

V prípade, že táto hlavička existuje, tak ju server štandardne spracuje a do logu zapíše napr.:

2025-05-28 08:13:54.204 [4] 00000022 (REQUESTSLOGGER) private network preflight allowed because cors preflight was allowed

Teoreticky sa môže hlavička Access-Control-Allow-Private-Network vyskytnúť aj v samostatnom preflight requeste, ale musela by na to existovať špeciálna konfigurácia. DNS by adresu muselo interne mapovať na privátny rozsah adries, napríklad www.nejakadomen.com a interne by resolve mena bol napríklad na rozsah 192.168 …. Je možné, že sa také konfigurácie vyskytujú. V takom prípade sa private network access riadi rovnako ako CORS - v prípade prístupu na cestu zadanú heslom sa overí, že pre tento origin je prístup povolený a informácie v logu budú podobné. Pripomíname, že na jeho fungovanie treba mať tiež nastavené allowPrivateNetworkAccess na true (východisková hodnota). Ak by bolo nastavené false, bola by v logu informácia, že nie je povolený v konfigurácii.