hasmanyguitars

hasmanyguitars

I have a logger metadata plug (MyAppWeb.Plug.LoggerMetadata) that requires the following 2 plugs to run first in order to add the user_id to the metadata:

  • plug(:fetch_session)
  • plug(MyAppWeb.Auth.Pipeline) (which uses Guardian to fetch the user_id)

So I initially set up the endpoint.ex file to look like this:

  ....
  plug(:fetch_session)
  plug MyAppWeb.Auth.Pipeline
  plug MyAppWeb.Plug.LoggerMetadata
  plug(Plug.Logger)

  plug(MyAppWeb.Router)
  ...

It feels weird to have fetch_session and Auth.Pipeline in endpoint.ex as opposed to the router, though.

So I ended up moving those plugs back to the router.ex file like so:

...
pipeline :logger do
  plug MyAppWeb.Plug.LoggerMetadata
  plug(Plug.Logger)
end

pipeline :support_authentication do
  plug(MyAppWeb.Auth.Pipeline)
end

pipeline :browser do
  plug(:accepts, ["html"])
  plug(:fetch_session)
  plug(:support_authentication)
  plug(:logger)
  ...
end
...

This also feels weird because now we have to explicitly call the logger with each new pipeline such as api, ajax, etc.

I’m wondering if there are any drawbacks/gotchas with my first method or maybe if I’m missing some third option.

Showing Posts 1 to 2

hauleth

hauleth

Do you want that user_id be available in both messages of Plug.Logger? If yes, then unfortunately this is probably the only solution, if it is enough to have that message only in second message, then you can put Plug.Logger back to the endpoint.

christhekeele

christhekeele

The Endpoint is all about what is requisite for an HTTP request to connect to your service.

The Router is about which controller to connect to given certain request values.

The point of a pipeline is to sort of blur the difference in your Router (in a useful way!) with nuanced controls based on request metadata: you don’t want to deny the request outright, you just want to pre-process it (and maybe choose to reject it with an appropriate status code) based on processing.

In this lens, auth belongs in the pipelines in your Router. Where an Endpoint should refuse responses outright, you probably want your Router to return meaningful auth failure HTTP status codes to callers.

Specifically, you want to route a request to a particular unauthenticated response: definitely a Router concern. I think your idea of making auth support a discrete pipeline makes sense in this context.

— All posts loaded —

Where Next? Top

Trending in Questions Top

RSP87
I’m working on a project that simulates the bumbl example in the programming phoenix book. It acts almost like an email client. We have a...
New
nseaSeb
Hello, I know there is an approach for handling lists that allows for optimized traversal, but I can’t recall the specific method (somet...
New
kpanic
Hi everyone, I am toying with the idea of building a “match maker” for giving personal help to people that wants to start coding. I sta...
New
brecabral
Documentation While reading the Scoped Routes section, I noticed that the documentation currently refers to a problem without explainin...
New
velrest
So my question is quite simple and i have found no conclusive answer on forum, google or AI. Should we use :erlang.float for Integer to ...
New
asweet-confluent
I recently noticed that Elixir’s Logger defaults its primary log level to :debug when no :logger, :level application configuration is pre...
New
apz
I’m new to elixir and just tried to install the elixirLS extension for VScode(ium) and it is throwing some errors that I would like help ...
New

Other Trending Topics Top

GenericJam
Edit: 2026 May 15 - This post is archived. Mob is alive!! Main docs: mob v0.7.11 — Documentation A bit of explanation for the slightly c...
New
JesseHerrick
Hey, I’m Jesse and I’m the main contributor behind Dexter, a full-featured, lightning-fast Elixir LSP optimized for large codebases. It s...
New
mudasobwa
I am happy to introduce the very α version of the new programming language compiled to BEAM. Welcome Cure. It has literally three kille...
New
marciok
Hi there! We created Gust: A task orchestrator inspired by Airflow. For those who have never heard about Aiflow, it’s a Python-based wor...
New
mhanberg
Hi everyone! The first release candidate for the Expert language server project is now available! We’ve published a press release detai...
New
jimsynz
Beam Bots (or just BB for short) is a framework for building fault-tolerant robotics applications in Elixir using familiar OTP patterns. ...
New

We're in Beta

About us Mission Statement

Options

Thread Display Mode




Thread Preview

Skip Thread Previews