How to send a scope (user id) to sentry (nodejs)?

[franse]

Hello!
Does anybody know what is the best way to send $_SESSION['securityproviderId'] as a scope?
I have that working on php and need it on nodejs too.

This is what I got, thanks to patrick it's very simple:

@patrick

const Sentry = require('@sentry/node');

exports.before = function(app) {
  Sentry.init({ dsn: "CHANGE_ME" });
  app.use(Sentry.Handlers.requestHandler());
};

exports.after = function(app) {
  app.use(Sentry.Handlers.errorHandler());
};

Thanks in advice!

[sid]

You can try to use server side binding in NodeJS:
<%= $_SESSION.somevariable %>

[franse]

Thanks @sid
The code is on extensions/server_connect/routes/sentry.js
So this is an option?

[sid]

This looks like a middleware. You should be able to access session via the req.session object directly.
Might have to add const session = require('./setup/session');.

[franse]

Thanks @sid
But it seems the problem is I can't send anything, even a static value:

exports.before = function (app) {
    Sentry.init({
        dsn: "XXX",
        beforeSend(event) {
            const user_id = '81';
            Sentry.configureScope(scope => {
                scope.setUser({ id: user_id });
            });
            return event;
        }
    });

1. I force the error:
   
   
2. I see the output on console:

_attachments: [],
_user: { id: '81' },
_tags: {},
_extra: {},
_contexts: {},
_sdkProcessingMetadata: {
  request: IncomingMessage {
    _readableState: [ReadableState],
    _events: [Object: null prototype],
    _eventsCount: 1,
    _maxListeners: undefined,
    socket: [Socket],
    httpVersionMajor: 1,
    httpVersionMinor: 1,
    httpVersion: '1.1',
    complete: true,
    rawHeaders: [Array],
    rawTrailers: [],
    joinDuplicateHeaders: undefined,
    aborted: false,
    upgrade: false,
    url: '/api/force_error',
    method: 'GET',
    statusCode: null,
    statusMessage: null,
    client: [Socket],
    _consuming: false,
    _dumped: true,
    next: [Function: next],
    baseUrl: '',
    originalUrl: '/api/force_error',
    _parsedUrl: [Url],

3. But nothing on sentry:
   
   

[franse]

After many attempts:

In case someone else needs it, just change sentryprovider for the name of the security provider you're using:

const Sentry = require('@sentry/node');

exports.before = function (app) {
    Sentry.init({
        dsn: "mydns",
        beforeSend(event) {
            console.log(event);
            return event;
        }
    });
    app.use((req, res, next) => {
        const user_id = req.session.sentryproviderId ?? '';
        Sentry.configureScope(scope => {
            scope.setUser({ id: user_id });
        });
        next();
    });
    app.use(Sentry.Handlers.requestHandler());
};

exports.after = function (app) {
    app.use(Sentry.Handlers.errorHandler());
};

[mgaussie]

Hi franse,

This is useful to me - so thank you. I've updated my sentry.js file with the above and included the name of my security provider, I have no errors, but also the user tag does not appear in Sentry.

Are there any other steps that you took for this tag to appear?

[franse]

Hello @mgaussie
How is the name of the security provider? Are you sure it has the Id at the end?

Example: mysecurityproviderId

[mgaussie]

Hi franse,

I feel like I should know this - but - my Security Provider is simply called 'sec'. I'm not sure where I would find the name that includes the ID - if you don't mind helping to point me in the right direction here.

[franse]

@mgaussie

I'm not sure where I would find the name that includes the ID

It's about this:

Logged User Session Name

When you setup a log in system, a session is being created by the log in script and it contains the logged user identity. This session and its value can be accessed by any other script by calling it (in your scripts). The name of session storing logged in user identity depends on your security provider name. It’s name is: securityProviderName + Id so if your security provider is called siteSecurity like here: [Screenshot_65] Then the session name will be: siteSecurityId So, for example in …

Then your code should be:

const Sentry = require('@sentry/node');

exports.before = function (app) {
    Sentry.init({
        dsn: "mydns",
        beforeSend(event) {
            console.log(event);
            return event;
        }
    });
    app.use((req, res, next) => {
        const user_id = req.session.secId ?? '';
        Sentry.configureScope(scope => {
            scope.setUser({ id: user_id });
        });
        next();
    });
    app.use(Sentry.Handlers.requestHandler());
};

exports.after = function (app) {
    app.use(Sentry.Handlers.errorHandler());
};

PS: Sorry @mgaussie should explained better, on the code you can see the line 12, there is a req.session.
There is where you need to write the security provider name + Id

[mgaussie]

Perfect, thank you franse - appreciate your help and for sharing the code here, this will be useful.