services/horizon: Strip regexes from routes before sending to prometheus

services/horizon/internal/httpx/middleware.go

@@ -4,6 +4,7 @@ import (
 	"context"
 	"database/sql"
 	"net/http"
+	"regexp"
 	"strconv"
 	"strings"
 	"time"
@@ -129,12 +130,15 @@ func getClientData(r *http.Request, headerName string) string {
 	return value
 }
 
+var routeRegexp = regexp.MustCompile("{(([^:}]*)?:[^}]*|().*)}")
+
 func logEndOfRequest(ctx context.Context, r *http.Request, requestDurationSummary *prometheus.SummaryVec, duration time.Duration, mw middleware.WrapResponseWriter, streaming bool) {
 	routePattern := chi.RouteContext(r.Context()).RoutePattern()
+	route := routeRegexp.ReplaceAllString(routePattern, "$2")
 	// Can be empty when request did not reached the final route (ex. blocked by
 	// a middleware). More info: https://github.com/go-chi/chi/issues/270
-	if routePattern == "" {
-		routePattern = "undefined"
+	if route == "" {
+		route = "undefined"
 	}
 
 	referer := r.Referer()
@@ -155,15 +159,15 @@ func logEndOfRequest(ctx context.Context, r *http.Request, requestDurationSummar
 		"ip_port":        r.RemoteAddr,
 		"method":         r.Method,
 		"path":           r.URL.String(),
-		"route":          routePattern,
+		"route":          route,
 		"status":         mw.Status(),
 		"streaming":      streaming,
 		"referer":        referer,
 	}).Info("Finished request")
 
 	requestDurationSummary.With(prometheus.Labels{
 		"status":    strconv.FormatInt(int64(mw.Status()), 10),
-		"route":     routePattern,
+		"route":     route,
 		"streaming": strconv.FormatBool(streaming),
 		"method":    r.Method,
 	}).Observe(float64(duration.Seconds()))

services/horizon/internal/httpx/middleware_test.go

@@ -0,0 +1,37 @@
+package httpx
+
+import (
+	"testing"
+)
+
+func TestMiddlewareSanitizesRoutesForPrometheus(t *testing.T) {
+	for _, setup := range []struct {
+		name     string
+		route    string
+		expected string
+	}{
+		{
+			"normal routes are unaffected",
+			"/accounts",
+			"/accounts",
+		},
+		{
+			"named regexes are replaced with their name",
+			"/accounts/{account_id:\\w+}/effects",
+			"/accounts/account_id/effects",
+		},
+		{
+			"unnamed regexes are removed",
+			"/accounts/{\\w+}/effects",
+			"/accounts//effects",
+		},
+	} {
+		t.Run(setup.name, func(t *testing.T) {
+			result := routeRegexp.ReplaceAllString(setup.route, "$2")
+			if result != setup.expected {
+				t.Errorf("Expected %q to be sanitized to %q, but got %q", setup.route, setup.expected, result)
+			}
+		})
+	}
+
+}