Created
February 25, 2020 10:03
-
-
Save ehrnst/683d199f33f6aff36c4474f763cd9eb3 to your computer and use it in GitHub Desktop.
Azure API management cosmosDB policy
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <!-- | |
| IMPORTANT: | |
| - Policy elements can appear only within the <inbound>, <outbound>, <backend> section elements. | |
| - To apply a policy to the incoming request (before it is forwarded to the backend service), place a corresponding policy element within the <inbound> section element. | |
| - To apply a policy to the outgoing response (before it is sent back to the caller), place a corresponding policy element within the <outbound> section element. | |
| - To add a policy, place the cursor at the desired insertion point and select a policy from the sidebar. | |
| - To remove a policy, delete the corresponding policy statement from the policy document. | |
| - Position the <base> element within a section element to inherit all policies from the corresponding section element in the enclosing scope. | |
| - Remove the <base> element to prevent inheriting policies from the corresponding section element in the enclosing scope. | |
| - Policies are applied in the order of their appearance, from the top down. | |
| - Comments within policy elements are not supported and may disappear. Place your comments between policy elements or at a higher level scope. | |
| --> | |
| <policies> | |
| <inbound> | |
| <base /> | |
| <set-variable name="requestDateString" value="@(DateTime.UtcNow.ToString("r"))" /> | |
| <set-variable name="cosmosKey" value="" /> | |
| <set-variable name="cosmosQuery" value="@{ | |
| var query = new { | |
| query = $"SELECT * FROM c WHERE c.id = @id", | |
| parameters = new[]{ | |
| new{name = "@id", value = "123"} | |
| } | |
| }; | |
| return Newtonsoft.Json.JsonConvert.SerializeObject(query);}" /> | |
| <send-request mode="new" response-variable-name="response" timeout="10" ignore-error="false"> | |
| <set-url>https://db-alertcentral.documents.azure.com/dbs/azureCustomerAlerts/colls/dummy/docs</set-url> | |
| <set-method>get</set-method> | |
| <set-header name="authorization" exists-action="override"> | |
| <value>@{ | |
| var verb = "get"; | |
| var resourceType = "docs"; | |
| var resourceLink = "dbs/azureCustomerAlerts/colls/dummy"; | |
| var key = ""; | |
| var keyType = "master"; | |
| var tokenVersion = "1.0"; | |
| var date = context.Variables.GetValueOrDefault<string>("requestDateString"); | |
| var hmacSha256 = new System.Security.Cryptography.HMACSHA256 { Key = Convert.FromBase64String(key) }; | |
| verb = verb ?? ""; | |
| resourceType = resourceType ?? ""; | |
| resourceLink = resourceLink ?? ""; | |
| string payLoad = string.Format("{0}\n{1}\n{2}\n{3}\n{4}\n", | |
| verb.ToLowerInvariant(), | |
| resourceType.ToLowerInvariant(), | |
| resourceLink, | |
| date.ToLowerInvariant(), | |
| "" | |
| ); | |
| byte[] hashPayLoad = hmacSha256.ComputeHash(System.Text.Encoding.UTF8.GetBytes(payLoad)); | |
| string signature = Convert.ToBase64String(hashPayLoad); | |
| return System.Uri.EscapeDataString(String.Format("type={0}&ver={1}&sig={2}", | |
| keyType, | |
| tokenVersion, | |
| signature)); | |
| }</value> | |
| </set-header> | |
| <set-header name="Content-Type" exists-action="override"> | |
| <value>application/query+json</value> | |
| </set-header> | |
| <set-header name="x-ms-documentdb-isquery" exists-action="override"> | |
| <value>true</value> | |
| </set-header> | |
| <set-header name="x-ms-date" exists-action="override"> | |
| <value>@(context.Variables.GetValueOrDefault<string>("requestDateString"))</value> | |
| </set-header> | |
| <set-header name="x-ms-version" exists-action="override"> | |
| <value>2017-02-22</value> | |
| </set-header> | |
| <set-header name="x-ms-query-enable-crosspartition" exists-action="override"> | |
| <value>true</value> | |
| </set-header> | |
| </send-request> | |
| <return-response> | |
| <set-body>@(((IResponse)context.Variables["response"]).Body.As<JObject>(preserveContent: true).ToString())</set-body> | |
| </return-response> | |
| </inbound> | |
| <backend> | |
| <base /> | |
| </backend> | |
| <outbound> | |
| <base /> | |
| </outbound> | |
| <on-error> | |
| <base /> | |
| </on-error> | |
| </policies> |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <!-- | |
| IMPORTANT: | |
| - Policy elements can appear only within the <inbound>, <outbound>, <backend> section elements. | |
| - To apply a policy to the incoming request (before it is forwarded to the backend service), place a corresponding policy element within the <inbound> section element. | |
| - To apply a policy to the outgoing response (before it is sent back to the caller), place a corresponding policy element within the <outbound> section element. | |
| - To add a policy, place the cursor at the desired insertion point and select a policy from the sidebar. | |
| - To remove a policy, delete the corresponding policy statement from the policy document. | |
| - Position the <base> element within a section element to inherit all policies from the corresponding section element in the enclosing scope. | |
| - Remove the <base> element to prevent inheriting policies from the corresponding section element in the enclosing scope. | |
| - Policies are applied in the order of their appearance, from the top down. | |
| - Comments within policy elements are not supported and may disappear. Place your comments between policy elements or at a higher level scope. | |
| --> | |
| <policies> | |
| <inbound> | |
| <base /> | |
| <set-variable name="requestDateString" value="@(DateTime.UtcNow.ToString("r"))" /> | |
| <set-variable name="cosmosKey" value="" /> | |
| <set-variable name="cosmosQuery" value="@{ | |
| var query = new { | |
| query = $"SELECT * FROM c WHERE c.id = @id", | |
| parameters = new[]{ | |
| new{name = "@id", value = "123"} | |
| } | |
| }; | |
| return Newtonsoft.Json.JsonConvert.SerializeObject(query);}" /> | |
| <send-request mode="new" response-variable-name="response" timeout="10" ignore-error="false"> | |
| <set-url>https://db-alertcentral.documents.azure.com/dbs/azureCustomerAlerts/colls/dummy/docs</set-url> | |
| <set-method>POST</set-method> | |
| <set-header name="authorization" exists-action="override"> | |
| <value>@{ | |
| var verb = "POST"; | |
| var resourceType = "docs"; | |
| var resourceLink = "dbs/azureCustomerAlerts/colls/dummy"; | |
| var key = ""; | |
| var keyType = "master"; | |
| var tokenVersion = "1.0"; | |
| var date = context.Variables.GetValueOrDefault<string>("requestDateString"); | |
| var hmacSha256 = new System.Security.Cryptography.HMACSHA256 { Key = Convert.FromBase64String(key) }; | |
| verb = verb ?? ""; | |
| resourceType = resourceType ?? ""; | |
| resourceLink = resourceLink ?? ""; | |
| string payLoad = string.Format("{0}\n{1}\n{2}\n{3}\n{4}\n", | |
| verb.ToLowerInvariant(), | |
| resourceType.ToLowerInvariant(), | |
| resourceLink, | |
| date.ToLowerInvariant(), | |
| "" | |
| ); | |
| byte[] hashPayLoad = hmacSha256.ComputeHash(System.Text.Encoding.UTF8.GetBytes(payLoad)); | |
| string signature = Convert.ToBase64String(hashPayLoad); | |
| return System.Uri.EscapeDataString(String.Format("type={0}&ver={1}&sig={2}", | |
| keyType, | |
| tokenVersion, | |
| signature)); | |
| }</value> | |
| </set-header> | |
| <set-header name="Content-Type" exists-action="override"> | |
| <value>application/query+json</value> | |
| </set-header> | |
| <set-header name="x-ms-documentdb-isquery" exists-action="override"> | |
| <value>true</value> | |
| </set-header> | |
| <set-header name="x-ms-date" exists-action="override"> | |
| <value>@(context.Variables.GetValueOrDefault<string>("requestDateString"))</value> | |
| </set-header> | |
| <set-header name="x-ms-version" exists-action="override"> | |
| <value>2017-02-22</value> | |
| </set-header> | |
| <set-header name="x-ms-query-enable-crosspartition" exists-action="override"> | |
| <value>true</value> | |
| </set-header> | |
| <set-body template="none">@(context.Variables.GetValueOrDefault<string>("cosmosQuery"))</set-body> | |
| </send-request> | |
| <return-response> | |
| <set-body>@(((IResponse)context.Variables["response"]).Body.As<JObject>(preserveContent: true).ToString())</set-body> | |
| </return-response> | |
| </inbound> | |
| <backend> | |
| <base /> | |
| </backend> | |
| <outbound> | |
| <base /> | |
| </outbound> | |
| <on-error> | |
| <base /> | |
| </on-error> | |
| </policies> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment