Disable auditing anonymous sessions

CHANGELOG.md

@@ -9,6 +9,7 @@
 ### Features
 - Login with AppleID (#293, PLUM Sprint 230908, @filipmelik)
 - Webauthn authenticator metadata (#256, PLUM Sprint 230908)
+- Configurably disable auditing of anonymous sessions (#304, PLUM Sprint 231006)
 
 ---
 

seacatauth/audit/service.py

@@ -11,6 +11,14 @@
 
 #
 
+asab.Config.add_defaults({
+	"seacatauth:audit": {
+		# Enable or disable the auditing of anonymous sessions.
+		# Disabling may be desirable for database performance reasons.
+		"log_anonymous_sessions": True,
+	},
+})
+
 
 class AuditService(asab.Service):
 
@@ -26,6 +34,7 @@ class AuditService(asab.Service):
 	def __init__(self, app, service_name="seacatauth.AuditService"):
 		super().__init__(app, service_name)
 		self.StorageService = app.get_service("asab.StorageService")
+		self.IsAnonymousLoggingEnabled = asab.Config.getboolean("seacatauth:audit", "log_anonymous_sessions")
 
 
 	async def append(
@@ -41,6 +50,10 @@ async def append(
 		"""
 		assert (isinstance(code, AuditCode))
 
+		# Do not audit anonymous sessions if desired (performance reasons)
+		if not self.IsAnonymousLoggingEnabled and code == AuditCode.ANONYMOUS_SESSION_CREATED:
+			return
+
 		# Do not use upsertor because it can trigger webhook
 		now = datetime.datetime.now(datetime.timezone.utc)
 		entry = {