replacedUri is now a local variable.

Fixed #110

Author: Chris Wiechmann

CHANGELOG.md

@@ -5,11 +5,14 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/)
 and this project adheres to [Semantic Versioning](http://semver.org/).
 
 ## [Unreleased]
-### Changed/Fixed
+### Changed
 - Helm-Chart for Filebeat now creates a dedicated ConfigMap: `...tic-filebeat-env-config` for environment properties and `...tic-filebeat-config` for the filebeat.yaml
 - Helm-Chart now expects files given in `/var/<logType>` instead of `/var/log/<logType>`, as `var/log` was causing the error: read-only file system: unknown when trying to mount the directories
 - Helm-Chart now expects the Cluster-UUID for Filebeat given in `filebeat.elasticsearchClusterUUID` instead of `filebeat.filebeatSecrets.elasticsearchClusterUUID`
 
+### Fixed
+- Potential race condition, when using External-HTTP-Based AuthZ [#110](https://github.com/Axway-API-Management-Plus/apigateway-openlogging-elk/issues/110)
+
 ## [3.0.0] 2021-05-11
 ### Added
 - New option to skip Elasticsearch in ANM and instead still use the OPSDB by providing an extra REST-API parameter [#105](https://github.com/Axway-API-Management-Plus/apigateway-openlogging-elk/issues/105)

UPDATE.md

@@ -50,6 +50,7 @@ On the other hand, the API builder Docker image, as a central component of the s
 | 2.4.1 | [X](#api-builderlogstashmemcached) | -                                  | -                                  | -             | -               | -               | -               |-                   | 7.10.0  |            |
 | 2.4.2 | [X](#api-builderlogstashmemcached) | -                                  | -                                  | -             | -               | -               | -               |[X](#elastic-config)| 7.10.0  |            |
 | 3.0.0 | [X](#api-builderlogstashmemcached) | -                                  | -                                  | -             | -               | -               | [X](#parameters)|-                   | 7.12.1  |            |
+| 3.0.1 | [X](#api-builderlogstashmemcached) | -                                  | -                                  | -             | -               | -               | -               |-                   | 7.12.1  |Not yet released|
 
 ### Update from Version 1.0.0
 

apibuilder4elastic/custom_flow_nodes/api-builder-plugin-authorization/src/actions.js

@@ -127,17 +127,19 @@ async function addExtHTTPAuthzFilter(params, options) {
 		logger.debug(`User authorization skippped as the user an API-Gateway Admin`);
 		return elasticQuery;
 	}
+	logger.debug(`Caching external user authorization information using key: 'ExtAuthZ###${user.loginName}'`);
 	const cacheKey = `ExtAuthZ###${user.loginName}`;
 	var cfg = authZConfig.externalHTTP;
+	var replacedUri;
 	if(!cache.has(cacheKey)) {
 		if(createRequestUri) {
-			cfg.replacedUri = await createRequestUri(user, cfg, options);
-			logger.debug(`Request URI created: ${cfg.replacedUri}`);
+			replacedUri = await createRequestUri(user, cfg, options);
+			logger.debug(`Request URI created: ${replacedUri}`);
 		} else {
 			throw new Error(`Missing method: createRequestUri. You have to defined the createRequestUri method to create the request URI.`);
 		}
-		logger.info(`External groups NOT found in cache with key: '${cacheKey}'. Going to request information from ${cfg.replacedUri}`);
-		const resp = await requester(cfg.replacedUri, cfg.headers, cfg.method, cfg.body, { logger, ...cfg.options });
+		logger.info(`External groups NOT found in cache with key: '${cacheKey}'. Going to request information from ${replacedUri}`);
+		const resp = await requester(replacedUri, cfg.headers, cfg.method, cfg.body, { logger, ...cfg.options });
 		cache.set(cacheKey, resp);
 	} else {
 		logger.debug(`External groups found in cache with key: '${cacheKey}'.`);