fix(validation): enforce strict CDR types and storage ranges

This commit is contained in:
2026-09-19 21:30:15 +03:30
parent 2f4c99620e
commit 0869282949
2 changed files with 93 additions and 87 deletions

View File

@@ -1,4 +1,6 @@
import json
from ipaddress import IPv4Address
from app.common.validation import PayloadError, parse_payload, validate_structure
import uuid
from dataclasses import dataclass
from datetime import datetime, timezone
@@ -58,9 +60,9 @@ class NormalizedRecord:
self.bytes_downloaded,
self.total_bytes,
self.duration_seconds,
datetime.strptime(self.session_start_time, "%Y-%m-%d %H:%M:%S"),
datetime.strptime(self.session_end_time, "%Y-%m-%d %H:%M:%S"),
self.source_ip,
datetime.strptime(self.session_start_time, "%Y-%m-%d %H:%M:%S").replace(tzinfo=timezone.utc),
datetime.strptime(self.session_end_time, "%Y-%m-%d %H:%M:%S").replace(tzinfo=timezone.utc),
IPv4Address(self.source_ip),
)
@@ -105,96 +107,51 @@ def normalize_cdr_payload(
(record, failure_reason, failed_field, raw_id)
If record is None, failure_reason describes why it should be routed to DLQ.
"""
# 1. Parse JSON
try:
if isinstance(raw_payload_bytes, bytes):
payload_str = raw_payload_bytes.decode("utf-8")
else:
payload_str = str(raw_payload_bytes)
payload: Dict[str, Any] = json.loads(payload_str)
except Exception:
payload = parse_payload(raw_payload_bytes)
except PayloadError:
return None, "malformed_json", None, None
if not isinstance(payload, dict):
return None, "malformed_json", None, None
raw_id = payload.get("raw_id")
raw_id_str = str(raw_id) if raw_id is not None else None
# 2. Check required fields
for field in REQUIRED_FIELDS:
if field not in payload or payload[field] is None:
return None, "missing_required_field", field, raw_id_str
# 3. Check timestamps (epoch_start <= epoch_end)
raw_id_str = raw_id if isinstance(raw_id, str) else None
try:
epoch_start = int(payload["epoch_start"])
epoch_end = int(payload["epoch_end"])
if epoch_start > epoch_end:
return None, "invalid_epoch", "epoch_start", raw_id_str
except (ValueError, TypeError):
validate_structure(payload)
except PayloadError as exc:
reason = "missing_required_field" if exc.reason == "missing_required_field" else (
"invalid_epoch" if exc.field in ("epoch_start", "epoch_end") else
"invalid_rat_value" if exc.field == "rat" else "normalization_error")
return None, reason, exc.field, raw_id_str
for field in ("epoch_start", "epoch_end"):
if not 0 <= payload[field] <= 2**32 - 1:
return None, "invalid_epoch", field, raw_id_str
epoch_start, epoch_end = payload["epoch_start"], payload["epoch_end"]
if epoch_start > epoch_end:
return None, "invalid_epoch", "epoch_start", raw_id_str
# 4. Check bytes (must be >= 0)
try:
up_bytes = int(payload["up_bytes"])
down_bytes = int(payload["down_bytes"])
if up_bytes < 0:
return None, "normalization_error", "up_bytes", raw_id_str
if down_bytes < 0:
return None, "normalization_error", "down_bytes", raw_id_str
except (ValueError, TypeError):
return None, "normalization_error", "bytes", raw_id_str
# 5. Radio Access Type mapping
rat_raw = payload.get("rat")
try:
rat_int = int(rat_raw)
if rat_int not in RAT_MAP:
return None, "invalid_rat_value", "rat", raw_id_str
radio_access_type = RAT_MAP[rat_int]
except (ValueError, TypeError):
for field in ("up_bytes", "down_bytes"):
if not 0 <= payload[field] <= 2**64 - 1:
return None, "normalization_error", field, raw_id_str
up_bytes, down_bytes = payload["up_bytes"], payload["down_bytes"]
if up_bytes + down_bytes > 2**64 - 1:
return None, "normalization_error", "total_bytes", raw_id_str
if payload["rat"] not in RAT_MAP:
return None, "invalid_rat_value", "rat", raw_id_str
# 6. E.164 phone normalization
caller_num = str(payload["caller_num"])
msisdn = normalize_phone_number(caller_num)
if not msisdn:
msisdn = normalize_phone_number(payload["caller_num"])
if msisdn is None:
return None, "normalization_error", "caller_num", raw_id_str
# 7. Field mappings and derivations
imsi = str(payload["device_id"])
service_type = str(payload["svc"])
cell_id = f"{payload['lac']}_{payload['ci']}"
total_bytes = up_bytes + down_bytes
duration_seconds = epoch_end - epoch_start
start_dt = datetime.fromtimestamp(epoch_start, tz=timezone.utc).strftime(
"%Y-%m-%d %H:%M:%S"
)
end_dt = datetime.fromtimestamp(epoch_end, tz=timezone.utc).strftime(
"%Y-%m-%d %H:%M:%S"
)
src_ip = str(payload.get("src_ip") or "0.0.0.0")
# Deterministic UUIDv5 cdr_id from raw_id
cdr_id = str(uuid.uuid5(uuid.NAMESPACE_DNS, raw_id_str))
try:
source_ip = str(IPv4Address(payload["src_ip"] if payload.get("src_ip") is not None else "0.0.0.0"))
except (ValueError, TypeError):
return None, "normalization_error", "src_ip", raw_id_str
try:
start_dt = datetime.fromtimestamp(epoch_start, timezone.utc).strftime("%Y-%m-%d %H:%M:%S")
end_dt = datetime.fromtimestamp(epoch_end, timezone.utc).strftime("%Y-%m-%d %H:%M:%S")
except (ValueError, OverflowError, OSError):
return None, "invalid_epoch", "epoch_start", raw_id_str
record = NormalizedRecord(
cdr_id=cdr_id,
raw_id=raw_id_str,
msisdn=msisdn,
imsi=imsi,
service_type=service_type,
radio_access_type=radio_access_type,
cell_id=cell_id,
bytes_uploaded=up_bytes,
bytes_downloaded=down_bytes,
total_bytes=total_bytes,
duration_seconds=duration_seconds,
session_start_time=start_dt,
session_end_time=end_dt,
source_ip=src_ip,
cdr_id=str(uuid.uuid5(uuid.NAMESPACE_DNS, raw_id)), raw_id=raw_id,
msisdn=msisdn, imsi=payload["device_id"], service_type=payload["svc"],
radio_access_type=RAT_MAP[payload["rat"]], cell_id=f"{payload['lac']}_{payload['ci']}",
bytes_uploaded=up_bytes, bytes_downloaded=down_bytes, total_bytes=up_bytes+down_bytes,
duration_seconds=epoch_end-epoch_start, session_start_time=start_dt,
session_end_time=end_dt, source_ip=source_ip,
)
return record, None, None, raw_id_str
return record, None, None, raw_id