feat: authsession service

authsession/internal/service/shared/observability.go

@@ -0,0 +1,46 @@
+package shared
+
+import (
+	"context"
+
+	authlogging "galaxy/authsession/internal/logging"
+
+	"go.uber.org/zap"
+)
+
+// LogServiceOutcome writes one structured service-level outcome log with a
+// stable severity derived from err and with trace fields attached when ctx
+// carries an active span.
+func LogServiceOutcome(logger *zap.Logger, ctx context.Context, message string, err error, fields ...zap.Field) {
+	if logger == nil {
+		logger = zap.NewNop()
+	}
+
+	fields = append(fields, authlogging.TraceFieldsFromContext(ctx)...)
+
+	switch {
+	case err == nil:
+		logger.Info(message, fields...)
+	case isExpectedServiceErrorCode(CodeOf(err)):
+		logger.Warn(message, append(fields, zap.Error(err))...)
+	default:
+		logger.Error(message, append(fields, zap.Error(err))...)
+	}
+}
+
+func isExpectedServiceErrorCode(code string) bool {
+	switch code {
+	case ErrorCodeInvalidRequest,
+		ErrorCodeChallengeNotFound,
+		ErrorCodeChallengeExpired,
+		ErrorCodeInvalidCode,
+		ErrorCodeInvalidClientPublicKey,
+		ErrorCodeBlockedByPolicy,
+		ErrorCodeSessionLimitExceeded,
+		ErrorCodeSessionNotFound,
+		ErrorCodeSubjectNotFound:
+		return true
+	default:
+		return false
+	}
+}