Method handleResponse

enterprise/aibridgeproxyd/aibridgeproxyd.go:1047–1104

handleResponse handles responses received from aibridged. This is called for every MITM'd request, including the pass-through path where handleRequest re-validated the CONNECT-time provider and forwarded the request to the original upstream instead of aibridged. Pass-through responses are identified

(resp *http.Response, ctx *goproxy.ProxyCtx)

// to avoid mislabeled logs and corrupting MITM metrics.
// Tunneled requests (non-provider-host domains) bypass this handler entirely.
func (s *Server) handleResponse(resp *http.Response, ctx *goproxy.ProxyCtx) *http.Response {
	if resp == nil {
		return nil
	}

	reqCtx, _ := ctx.UserData.(*requestContext)
	connectSessionID := uuid.Nil
	requestID := uuid.Nil
	provider := ""
	if reqCtx != nil {
		connectSessionID = reqCtx.ConnectSessionID
		requestID = reqCtx.RequestID
		provider = reqCtx.Provider
	}

	logger := s.logger.With(
		slog.F("connect_id", connectSessionID.String()),
		slog.F("request_id", requestID.String()),
		slog.F("provider", provider),
		slog.F("status", resp.StatusCode),
	)

	// Pass-through responses (handleRequest returned without routing to
	// aibridged) come from the real upstream. The aibridged-specific log
	// and metrics do not apply; the pass-through itself is already logged
	// in handleRequest.
	if requestID == uuid.Nil {
		return resp
	}

	switch {
	case resp.StatusCode >= http.StatusInternalServerError:
		logger.Error(s.ctx, "received error response from aibridged",
			slog.F("response_body", s.readErrorBodyForLog(resp, logger)))
	case resp.StatusCode >= http.StatusBadRequest:
		logger.Warn(s.ctx, "received error response from aibridged",
			slog.F("response_body", s.readErrorBodyForLog(resp, logger)))
	default:
		logger.Debug(s.ctx, "received response from aibridged")
	}

	if s.metrics != nil && provider != "" {
		// Decrement inflight requests gauge now that the request is complete.
		s.metrics.InflightMITMRequests.WithLabelValues(provider).Dec()

		// Record response by status code.
		s.metrics.MITMResponsesTotal.WithLabelValues(strconv.Itoa(resp.StatusCode), provider).Inc()
	}

	// Dump the response to disk when a dumper was created for this request.
	if reqCtx != nil && reqCtx.Dumper != nil {
		if err := reqCtx.Dumper.DumpResponse(resp); err != nil {
			logger.Warn(s.ctx, "failed to dump response", slog.Error(err))
		}
	}

	return resp
}