Use the STS plug-in of web tracking SDK for JavaScript to upload logs

Background information

If you do not use STS for temporary authorization, you must enable the web tracking feature for the Logstore. Web tracking SDK for JavaScript uploads logs collected from browsers to the Logstore of Simple Log Service, which may generate dirty data. The following items describe the process of using the STS plug-in of web tracking SDK for JavaScript to upload logs:

1. A browser requests a temporary identity credential (STS token) from a business server.

2. The service server requests an STS token from the STS service.

   1. An AccessKey pair of the Resource Access Management (RAM) user is configured in the server and the RAM user is attached the AliyunSTSAssumeRoleAccess policy.

   2. The server uses the AccessKey pair of the RAM user to call the AssumeRole operation of STS to obtain the STS token of the RAM role. You can use the Policy parameter of AssumeRole to restrict the permissions of different STS tokens based on the user or device.

3. STS returns an STS token to the business server.

4. The service server returns an STS token to the browser.

5. The browser uses the obtained STS token to assume the RAM role and uploads logs collected from the browser to the Logstore.

6. Simple Log Service returns a response to the browser after the log is uploaded.

Prerequisites

• The RAM user is created and the AliyunSTSAssumeRoleAccess policy is attached to the RAM user. For more information, see Create a RAM user.

• For more information about how to configure the AccessKey pair of the RAM user in environment variables of the business server, see Configure environment variables in Linux, macOS, and Windows.

• You have created a RAM role for a trusted Alibaba Cloud account and granted the RAM role the permission to write data to the specified project. For more information, see Create a RAM role for a trusted Alibaba Cloud account and Examples of using custom policies to grant permissions to a RAM user.

  {
    "Version": "1",
    "Statement": [
      {
        "Action": [
          "log:Post*"
        ],
        "Resource": "acs:log:*:*:project/<The name of the specified project.>/*",
        "Effect": "Allow"
      }
    ]
  }

Step 1: Install and configure the SDK

1. Install Node.js.

2. Run the following command on the business server to install dependencies.

   npm install --save @aliyun-sls/web-track-browser
   npm install --save @aliyun-sls/web-sts-plugin

3. Add the following code to your program to configure the SDK.

   import SlsTracker from '@aliyun-sls/web-track-browser'
   import createStsPlugin from '@aliyun-sls/web-sts-plugin'
   
   const opts = {
     host: '${host}', // The Simple Log Service endpoint for the region. Example: cn-hangzhou.log.aliyuncs.com.
     project: '${project}', // The name of the project. 
     logstore: '${logstore}', // The name of the Logstore. 
     time: 10, // The interval at which logs are sent. Default value: 10. Unit: seconds. 
     count: 10, // The maximum number of logs that can be sent in each request. Default value: 10. 
     topic: 'topic',// The custom topic of logs. 
     source: 'source',
     tags: {
       tags: 'tags',
     },
   }
   
   const stsOpt = {
     accessKeyId: '',
     accessKeySecret: '',
     securityToken: '',
     // The following is a simple example of an STS token refresh function.
     refreshSTSToken: () =>
       new Promise((resolve, reject) => {
         const xhr = new window.XMLHttpRequest()
           xhr.open('GET', 'localhost:7000/test/sts', true)
           xhr.send()
           xhr.onreadystatechange = () => {
             if (xhr.readyState === 4) {
               if (xhr.status === 200) {
                 let credential = JSON.parse(xhr.response)
                 // The purpose of the function is to configure the temporary key and token of stsOpt. 
                 stsOpt.accessKeyId = credential.AccessKeyId
                 stsOpt.accessKeySecret = credential.AccessKeySecret
                 stsOpt.securityToken = credential.SecurityToken
                 resolve()
               } else {
                 reject('Wrong status code.')
               }
             }
           }
         }),
     // refreshSTSTokenInterval: 300000,
     // stsTokenFreshTime: undefined,
   }
   
   // Create a tracker.
   const tracker = new SlsTracker(opts)
   // Create the STS plug-in.
   const stsPlugin = createStsPlugin(stsOpt)
   // Use the STS plug-in.
   tracker.useStsPlugin(stsPlugin)
   
   // Assume that you want to upload a single log.
   tracker.send({
     eventType:'view_product',
     productName: 'Tablet',
     price: 500
   })
   

   The description of web tracking parameters is as follows:

   Parameter	Required	Description

   Parameter	Required	Description
   host	Yes	The endpoint of the region where Simple Log Service resides. In this example, the Simple Log Service endpoint for the China (Hangzhou) region is used. Replace the parameter value with the actual endpoint. For more information, see Endpoints.
   project	Yes	The name of the project.
   logstore	Yes	The name of the Logstore.
   time	No	The interval at which logs are sent. Default value: 10. Unit: seconds.
   count	No	The maximum number of logs that can be sent in each request. Default value: 10.
   topic	No	The topic of logs. You can specify a custom value for this parameter to facilitate identification.
   source	No	The source of logs. You can specify a custom value for this parameter to facilitate identification.
   tags	No	The tag information about logs. You can specify a custom tag to identify logs.

   The description of STS parameters is as follows:

   Parameter	Required	Description

   Parameter	Required	Description
   accessKeyId accessKeySecret securityToken	Yes	The business server uses the AccessKey pair of the RAM user to call the AssumeRole operation. The response parameters include AccessKeySecret, AccessKeyId, and SecurityToken. In the input parameters of the AssumeRole operation, DurationSeconds specifies the validity period of the token and Policy specifies the permission scope of the token.
   refreshSTSToken	Yes	Your STS token request function, which is used to periodically obtain STS tokens to update the preceding fields. You can use a Promise/async function.
   refreshSTSTokenInterval	No	The interval at which tokens are refreshed, in millisecond. Default value: 300,000, which indicates 5 minutes.
   stsTokenFreshTime	No	The latest token acquisition time. You do not need to specify this parameter.

References

• This topic uses the web tracking SDK for JavaScript to collect website logs. For more information about how to use web tracking SDK for JavaScript to collect mini program logs, see Use web tracking SDK for JavaScript to collect mini program logs.

FAQ

The SDK starts without errors, but when sending logs, it reports the TypeError: Cannot read properties of undefined (reading 'sigBytes'). What do I do if this issue occurs?

Possible cause: Issues with CryptoJS encryption. Due to the difficulty in modifying the third-party package, we recommend that you use web tracking for unauthenticated writes. For more information, see Use the web tracking feature to collect logs.