61 lines
1.7 KiB
Go
61 lines
1.7 KiB
Go
package server
|
|
|
|
import (
|
|
"encoding/json"
|
|
"net/http"
|
|
"strconv"
|
|
)
|
|
|
|
// GET /api/v1/admin/audit?tenant=3&limit=50&offset=0&action=node_kick&actor_type=session&actor_id=12&target_type=node&target_id=nodeA&from=1700000000&to=1700003600
|
|
func (s *Server) HandleAdminAudit(w http.ResponseWriter, r *http.Request) {
|
|
if r.Method != http.MethodGet {
|
|
http.Error(w, "method not allowed", http.StatusMethodNotAllowed)
|
|
return
|
|
}
|
|
limit := 50
|
|
offset := 0
|
|
if v := r.URL.Query().Get("limit"); v != "" {
|
|
if i, err := strconv.Atoi(v); err == nil && i > 0 && i <= 500 {
|
|
limit = i
|
|
}
|
|
}
|
|
if v := r.URL.Query().Get("offset"); v != "" {
|
|
if i, err := strconv.Atoi(v); err == nil && i >= 0 {
|
|
offset = i
|
|
}
|
|
}
|
|
tenantID := int64(0)
|
|
if v := r.URL.Query().Get("tenant"); v != "" {
|
|
if i, err := strconv.ParseInt(v, 10, 64); err == nil {
|
|
tenantID = i
|
|
}
|
|
}
|
|
|
|
action := r.URL.Query().Get("action")
|
|
actorType := r.URL.Query().Get("actor_type")
|
|
actorID := r.URL.Query().Get("actor_id")
|
|
targetType := r.URL.Query().Get("target_type")
|
|
targetID := r.URL.Query().Get("target_id")
|
|
|
|
fromTs := int64(0)
|
|
toTs := int64(0)
|
|
if v := r.URL.Query().Get("from"); v != "" {
|
|
if i, err := strconv.ParseInt(v, 10, 64); err == nil && i > 0 {
|
|
fromTs = i
|
|
}
|
|
}
|
|
if v := r.URL.Query().Get("to"); v != "" {
|
|
if i, err := strconv.ParseInt(v, 10, 64); err == nil && i > 0 {
|
|
toTs = i
|
|
}
|
|
}
|
|
|
|
logs, err := s.store.ListAuditLogs(tenantID, limit, offset, action, actorType, actorID, targetType, targetID, fromTs, toTs)
|
|
if err != nil {
|
|
http.Error(w, err.Error(), http.StatusInternalServerError)
|
|
return
|
|
}
|
|
w.Header().Set("Content-Type", "application/json")
|
|
_ = json.NewEncoder(w).Encode(map[string]any{"error": 0, "logs": logs})
|
|
}
|