Changeset 0.17.1 (#76)

server/store/sqlite/audit.go

@@ -0,0 +1,84 @@
+package sqlite
+
+import (
+	"context"
+	"database/sql"
+	"encoding/json"
+	"time"
+
+	"git.gobha.me/xcaliber/chat-switchboard/models"
+	"git.gobha.me/xcaliber/chat-switchboard/store"
+)
+
+type AuditStore struct{}
+
+func NewAuditStore() *AuditStore { return &AuditStore{} }
+
+func (s *AuditStore) Log(ctx context.Context, entry *models.AuditEntry) error {
+	entry.ID = store.NewID()
+	entry.CreatedAt = time.Now().UTC()
+	metadataJSON := ToJSON(entry.Metadata)
+	_, err := DB.ExecContext(ctx, `
+		INSERT INTO audit_log (id, actor_id, action, resource_type, resource_id, metadata, ip_address, user_agent, created_at)
+		VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+		entry.ID, models.NullString(entry.ActorID), entry.Action, entry.ResourceType,
+		entry.ResourceID, metadataJSON, entry.IPAddress, entry.UserAgent,
+		entry.CreatedAt.Format(timeFmt),
+	)
+	return err
+}
+
+func (s *AuditStore) List(ctx context.Context, opts store.AuditListOptions) ([]models.AuditEntry, int, error) {
+	b := NewSelect("id, actor_id, action, resource_type, resource_id, metadata, ip_address, user_agent, created_at", "audit_log")
+
+	if opts.ActorID != "" {
+		b.Where("actor_id = ?", opts.ActorID)
+	}
+	if opts.Action != "" {
+		b.Where("action = ?", opts.Action)
+	}
+	if opts.ResourceType != "" {
+		b.Where("resource_type = ?", opts.ResourceType)
+	}
+	if opts.ResourceID != "" {
+		b.Where("resource_id = ?", opts.ResourceID)
+	}
+	if opts.Since != nil {
+		b.Where("created_at >= ?", *opts.Since)
+	}
+	if opts.Until != nil {
+		b.Where("created_at <= ?", *opts.Until)
+	}
+
+	countQ, countArgs := b.CountBuild()
+	var total int
+	DB.QueryRowContext(ctx, countQ, countArgs...).Scan(&total)
+
+	if opts.Sort == "" {
+		b.OrderBy("created_at", "DESC")
+	}
+	b.Paginate(opts.ListOptions)
+
+	q, args := b.Build()
+	rows, err := DB.QueryContext(ctx, q, args...)
+	if err != nil {
+		return nil, 0, err
+	}
+	defer rows.Close()
+
+	var result []models.AuditEntry
+	for rows.Next() {
+		var e models.AuditEntry
+		var actorID sql.NullString
+		var metadataJSON string
+		err := rows.Scan(&e.ID, &actorID, &e.Action, &e.ResourceType, &e.ResourceID,
+			&metadataJSON, &e.IPAddress, &e.UserAgent, st(&e.CreatedAt))
+		if err != nil {
+			return nil, 0, err
+		}
+		e.ActorID = NullableStringPtr(actorID)
+		json.Unmarshal([]byte(metadataJSON), &e.Metadata)
+		result = append(result, e)
+	}
+	return result, total, rows.Err()
+}