70 lines
2.4 KiB
Go
70 lines
2.4 KiB
Go
// Package audit 提供了用户操作审计相关的功能
|
|
package audit
|
|
|
|
import (
|
|
"time"
|
|
|
|
"git.huangwc.com/pig/pig-farm-controller/internal/infra/logs"
|
|
"git.huangwc.com/pig/pig-farm-controller/internal/infra/models"
|
|
"git.huangwc.com/pig/pig-farm-controller/internal/infra/repository"
|
|
// 移除对 "github.com/gin-gonic/gin" 的直接依赖
|
|
)
|
|
|
|
// RequestContext 封装了审计日志所需的请求上下文信息
|
|
type RequestContext struct {
|
|
ClientIP string
|
|
HTTPPath string
|
|
HTTPMethod string
|
|
}
|
|
|
|
// Service 定义了审计服务的接口
|
|
type Service interface {
|
|
LogAction(user *models.User, reqCtx RequestContext, actionType, description string, targetResource interface{}, status models.AuditStatus, resultDetails string)
|
|
}
|
|
|
|
// service 是 Service 接口的实现
|
|
type service struct {
|
|
userActionLogRepository repository.UserActionLogRepository
|
|
logger *logs.Logger
|
|
}
|
|
|
|
// NewService 创建一个新的审计服务实例
|
|
func NewService(repo repository.UserActionLogRepository, logger *logs.Logger) Service {
|
|
return &service{userActionLogRepository: repo, logger: logger}
|
|
}
|
|
|
|
// LogAction 记录一个用户操作。它在一个新的 goroutine 中异步执行，以避免阻塞主请求。
|
|
func (s *service) LogAction(user *models.User, reqCtx RequestContext, actionType, description string, targetResource interface{}, status models.AuditStatus, resultDetails string) {
|
|
// 不再从 context 中获取用户信息，直接使用传入的 user 对象
|
|
if user == nil {
|
|
s.logger.Warnw("无法记录审计日志：传入的用户对象为 nil")
|
|
return
|
|
}
|
|
|
|
log := &models.UserActionLog{
|
|
Time: time.Now(),
|
|
UserID: user.ID,
|
|
Username: user.Username, // 用户名快照
|
|
SourceIP: reqCtx.ClientIP,
|
|
ActionType: actionType,
|
|
Description: description,
|
|
Status: status,
|
|
HTTPPath: reqCtx.HTTPPath,
|
|
HTTPMethod: reqCtx.HTTPMethod,
|
|
ResultDetails: resultDetails,
|
|
}
|
|
|
|
// 使用模型提供的方法来设置 TargetResource
|
|
if err := log.SetTargetResource(targetResource); err != nil {
|
|
s.logger.Errorw("无法记录审计日志：序列化 targetResource 失败", "error", err)
|
|
// 即使序列化失败，我们可能仍然希望记录操作本身，所以不在此处 return
|
|
}
|
|
|
|
// 异步写入数据库，不阻塞当前请求
|
|
go func() {
|
|
if err := s.userActionLogRepository.Create(log); err != nil {
|
|
s.logger.Errorw("异步保存审计日志失败", "error", err)
|
|
}
|
|
}()
|
|
}
|