47 lines
1.6 KiB
Go
47 lines
1.6 KiB
Go
package middleware
|
|
|
|
import (
|
|
"bytes"
|
|
"io"
|
|
"strings"
|
|
"time"
|
|
|
|
"kra/internal/service"
|
|
"kra/internal/service/dto"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
func OperationAudit(service *service.AuditService) gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
if isBootstrapPath(c.Request.URL.Path) || c.Request.Method == "GET" || c.Request.Method == "HEAD" || c.Request.Method == "OPTIONS" {
|
|
c.Next()
|
|
return
|
|
}
|
|
path := c.Request.URL.Path
|
|
if strings.Contains(path, "sysOperationRecord") || strings.Contains(path, "sysLoginLog") || strings.Contains(path, "dataAccessLog") {
|
|
c.Next()
|
|
return
|
|
}
|
|
var requestBody []byte
|
|
if c.Request.Body != nil {
|
|
requestBody, _ = io.ReadAll(io.LimitReader(c.Request.Body, 32769))
|
|
c.Request.Body = io.NopCloser(bytes.NewReader(requestBody))
|
|
}
|
|
writer := &captureWriter{ResponseWriter: c.Writer}
|
|
c.Writer = writer
|
|
started := time.Now()
|
|
c.Next()
|
|
userID := uint(0)
|
|
if claims := Claims(c); claims != nil {
|
|
userID = claims.ID
|
|
}
|
|
requestID, _ := c.Get("request_id")
|
|
status, errorMessage := c.Writer.Status(), ""
|
|
if status >= 400 {
|
|
errorMessage = writer.body.String()
|
|
}
|
|
_ = service.RecordOperationRequest(c.Request.Context(), &dto.OperationRecordRequest{IP: c.ClientIP(), Method: c.Request.Method, Path: path, Status: status, LatencyMS: time.Since(started).Milliseconds(), Agent: c.Request.UserAgent(), ErrorMessage: errorMessage, Body: redactJSON(requestBody), Response: redactJSON(writer.body.Bytes()), UserID: userID, RequestID: stringValue(requestID), TraceID: c.GetHeader("traceparent"), DeviceID: c.GetHeader("X-Device-Id")})
|
|
}
|
|
}
|