ticket parser: Add priority to access service requests (#11278)

Author: molotkov-and

ydb/core/security/ticket_parser_impl.h

@@ -141,6 +141,7 @@ class TTicketParserImpl : public TActorBootstrapped<TDerived> {
         TStackVec<TString> AdditionalSIDs;
         bool RefreshRetryableErrorImmediately = false;
         TExternalAuthInfo ExternalAuthInfo;
+        bool IsLowAccessServiceRequestPriority = false;
 
         TTokenRecordBase(const TStringBuf ticket)
             : Ticket(ticket)
@@ -394,6 +395,11 @@ class TTicketParserImpl : public TActorBootstrapped<TDerived> {
             }
         }
 
+        if (record.IsLowAccessServiceRequestPriority) {
+            auto& headers = request->Headers;
+            headers["x-ya-priority"] = "low";
+        }
+
         return request;
     }
 
@@ -1704,6 +1710,7 @@ class TTicketParserImpl : public TActorBootstrapped<TDerived> {
         CounterTicketsBuildTime->Collect((now - record.InitTime).MilliSeconds());
         BLOG_D("Ticket " << record.GetMaskedTicket() << " ("
                     << record.PeerName << ") has now valid token of " << record.Subject);
+        record.IsLowAccessServiceRequestPriority = true;
         RefreshQueue.push({.Key = key, .RefreshTime = record.RefreshTime});
     }
 
@@ -1732,6 +1739,7 @@ class TTicketParserImpl : public TActorBootstrapped<TDerived> {
                         << record.PeerName << ") has now permanent error message '" << error.Message << "'");
         }
         CounterTicketsErrors->Inc();
+        record.IsLowAccessServiceRequestPriority = true;
         RefreshQueue.push({.Key = key, .RefreshTime = record.RefreshTime});
     }
 

ydb/library/grpc/actor_client/grpc_service_client.h

@@ -94,6 +94,9 @@ class TGrpcServiceClient  {
         if (requestId) {
             meta.Aux.push_back({"x-request-id", requestId});
         }
+        for (const auto& [k, v] : ev->Get()->Headers) {
+            meta.Aux.push_back({k, v});
+        }
         for (auto [k ,v]: Headers) {
             meta.Aux.push_back({k, v});
         }

ydb/library/ncloud/api/events.h

@@ -11,6 +11,7 @@ struct TEvGrpcProtoRequest : NActors::TEventLocal<TEv, TEventType> {
     TProtoMessage Request;
     TString Token;
     TString RequestId;
+    std::unordered_map<TString, TString> Headers;
 };
 
 template <typename TEv, ui32 TEventType, typename TProtoMessage>

ydb/library/ycloud/api/events.h

@@ -12,6 +12,7 @@ struct TEvGrpcProtoRequest : NActors::TEventLocal<TEv, TEventType> {
     TProtoMessage Request;
     TString Token;
     TString RequestId;
+    std::unordered_map<TString, TString> Headers;
 };
 
 template <typename TEv, ui32 TEventType, typename TProtoMessage>