Files
2026-08-09 05:33:21 +08:00

307 lines
8.6 KiB
Go

package store
import (
"context"
"database/sql"
"errors"
"fmt"
"strings"
"time"
)
func (s *Store) AppendAuditEvent(ctx context.Context, value AuditEvent) (AuditEvent, error) {
value.Action = strings.TrimSpace(value.Action)
if value.Action == "" {
return AuditEvent{}, errors.New("audit action is required")
}
details, err := normalizeJSONObject(value.Details)
if err != nil {
return AuditEvent{}, fmt.Errorf("normalize audit details: %w", err)
}
if value.CreatedAt.IsZero() {
value.CreatedAt = time.Now().UTC()
}
result, err := s.db.ExecContext(ctx, `
INSERT INTO audit_events (
actor, action, entity_type, entity_id, outcome, remote_addr,
details_json, created_at
) VALUES (?, ?, ?, ?, ?, ?, ?, ?)
`,
value.Actor, value.Action, value.EntityType, value.EntityID,
value.Outcome, value.RemoteAddr, string(details), value.CreatedAt.Unix(),
)
if err != nil {
return AuditEvent{}, fmt.Errorf("append audit event: %w", err)
}
value.ID, err = result.LastInsertId()
if err != nil {
return AuditEvent{}, fmt.Errorf("read audit event id: %w", err)
}
value.Details = details
return value, nil
}
func (s *Store) ListAuditEvents(ctx context.Context, filter AuditFilter) ([]AuditEvent, error) {
clauses := make([]string, 0, 7)
args := make([]any, 0, 8)
if filter.Actor != "" {
clauses = append(clauses, `actor = ?`)
args = append(args, filter.Actor)
}
if filter.Action != "" {
clauses = append(clauses, `action = ?`)
args = append(args, filter.Action)
}
if filter.EntityType != "" {
clauses = append(clauses, `entity_type = ?`)
args = append(args, filter.EntityType)
}
if filter.EntityID != "" {
clauses = append(clauses, `entity_id = ?`)
args = append(args, filter.EntityID)
}
if !filter.Since.IsZero() {
clauses = append(clauses, `created_at >= ?`)
args = append(args, filter.Since.UTC().Unix())
}
if !filter.Until.IsZero() {
clauses = append(clauses, `created_at < ?`)
args = append(args, filter.Until.UTC().Unix())
}
if filter.BeforeID > 0 {
clauses = append(clauses, `id < ?`)
args = append(args, filter.BeforeID)
}
query := auditEventSelect
if len(clauses) > 0 {
query += ` WHERE ` + strings.Join(clauses, ` AND `)
}
query += ` ORDER BY created_at DESC, id DESC LIMIT ?`
args = append(args, normalizedLimit(filter.Limit))
rows, err := s.db.QueryContext(ctx, query, args...)
if err != nil {
return nil, fmt.Errorf("list audit events: %w", err)
}
defer rows.Close()
values := make([]AuditEvent, 0)
for rows.Next() {
value, err := auditEvent(rows)
if err != nil {
return nil, fmt.Errorf("scan audit event: %w", err)
}
values = append(values, value)
}
if err := rows.Err(); err != nil {
return nil, fmt.Errorf("iterate audit events: %w", err)
}
return values, nil
}
const auditEventSelect = `
SELECT id, actor, action, entity_type, entity_id, outcome,
remote_addr, details_json, created_at
FROM audit_events`
func auditEvent(row rowScanner) (AuditEvent, error) {
var value AuditEvent
var details string
var createdAt int64
err := row.Scan(
&value.ID, &value.Actor, &value.Action, &value.EntityType,
&value.EntityID, &value.Outcome, &value.RemoteAddr, &details,
&createdAt,
)
if errors.Is(err, sql.ErrNoRows) {
return AuditEvent{}, ErrNotFound
}
if err != nil {
return AuditEvent{}, err
}
value.Details = []byte(details)
value.CreatedAt = time.Unix(createdAt, 0).UTC()
return value, nil
}
func (s *Store) AppendLogEvent(ctx context.Context, value LogEvent) (LogEvent, error) {
value.Level = strings.ToLower(strings.TrimSpace(value.Level))
if value.Level == "" {
return LogEvent{}, errors.New("log level is required")
}
if strings.TrimSpace(value.Message) == "" {
return LogEvent{}, errors.New("log message is required")
}
fields, err := normalizeJSONValue(value.Fields)
if err != nil {
return LogEvent{}, fmt.Errorf("normalize log fields: %w", err)
}
if value.Time.IsZero() {
value.Time = time.Now().UTC()
}
result, err := s.db.ExecContext(ctx, `
INSERT INTO log_events (event_time, level, message, caller, fields_json)
VALUES (?, ?, ?, ?, ?)
`, value.Time.Unix(), value.Level, value.Message, value.Caller, string(fields))
if err != nil {
return LogEvent{}, fmt.Errorf("append log event: %w", err)
}
value.ID, err = result.LastInsertId()
if err != nil {
return LogEvent{}, fmt.Errorf("read log event id: %w", err)
}
value.Fields = fields
return value, nil
}
func (s *Store) ListLogEvents(ctx context.Context, filter LogFilter) ([]LogEvent, error) {
clauses := make([]string, 0, 4)
args := make([]any, 0, 5)
if filter.Level != "" {
clauses = append(clauses, `level = ?`)
args = append(args, strings.ToLower(filter.Level))
}
if !filter.Since.IsZero() {
clauses = append(clauses, `event_time >= ?`)
args = append(args, filter.Since.UTC().Unix())
}
if !filter.Until.IsZero() {
clauses = append(clauses, `event_time < ?`)
args = append(args, filter.Until.UTC().Unix())
}
if filter.BeforeID > 0 {
clauses = append(clauses, `id < ?`)
args = append(args, filter.BeforeID)
}
query := logEventSelect
if len(clauses) > 0 {
query += ` WHERE ` + strings.Join(clauses, ` AND `)
}
query += ` ORDER BY event_time DESC, id DESC LIMIT ?`
args = append(args, normalizedLimit(filter.Limit))
rows, err := s.db.QueryContext(ctx, query, args...)
if err != nil {
return nil, fmt.Errorf("list log events: %w", err)
}
defer rows.Close()
values := make([]LogEvent, 0)
for rows.Next() {
value, err := logEvent(rows)
if err != nil {
return nil, fmt.Errorf("scan log event: %w", err)
}
values = append(values, value)
}
if err := rows.Err(); err != nil {
return nil, fmt.Errorf("iterate log events: %w", err)
}
return values, nil
}
const logEventSelect = `
SELECT id, event_time, level, message, caller, fields_json
FROM log_events`
func logEvent(row rowScanner) (LogEvent, error) {
var value LogEvent
var eventTime int64
var fields string
err := row.Scan(
&value.ID, &eventTime, &value.Level, &value.Message,
&value.Caller, &fields,
)
if errors.Is(err, sql.ErrNoRows) {
return LogEvent{}, ErrNotFound
}
if err != nil {
return LogEvent{}, err
}
value.Time = time.Unix(eventTime, 0).UTC()
value.Fields = []byte(fields)
return value, nil
}
func (s *Store) PruneAuditEvents(ctx context.Context, before time.Time) (int64, error) {
return deleteEventsBefore(ctx, s.db, `audit_events`, `created_at`, before)
}
func (s *Store) PruneLogEvents(ctx context.Context, before time.Time) (int64, error) {
return deleteEventsBefore(ctx, s.db, `log_events`, `event_time`, before)
}
// CountLogEvents returns how many application log rows are persisted.
func (s *Store) CountLogEvents(ctx context.Context) (int64, error) {
var count int64
if err := s.db.QueryRowContext(ctx, `SELECT COUNT(*) FROM log_events`).Scan(&count); err != nil {
return 0, fmt.Errorf("count log events: %w", err)
}
return count, nil
}
// PruneLogEventsToCount keeps only the newest `keep` log rows, deleting the
// rest. keep <= 0 deletes everything.
func (s *Store) PruneLogEventsToCount(ctx context.Context, keep int) (int64, error) {
if keep < 0 {
keep = 0
}
result, err := s.db.ExecContext(ctx, `
DELETE FROM log_events WHERE id NOT IN (
SELECT id FROM log_events ORDER BY id DESC LIMIT ?
)
`, keep)
if err != nil {
return 0, fmt.Errorf("prune log events to count: %w", err)
}
affected, err := result.RowsAffected()
if err != nil {
return 0, fmt.Errorf("read pruned log count: %w", err)
}
return affected, nil
}
func deleteEventsBefore(
ctx context.Context,
executor contextExecer,
table string,
column string,
before time.Time,
) (int64, error) {
// table and column are internal constants from the callers above.
result, err := executor.ExecContext(
ctx,
`DELETE FROM `+table+` WHERE `+column+` < ?`,
before.UTC().Unix(),
)
if err != nil {
return 0, fmt.Errorf("prune %s: %w", table, err)
}
affected, err := result.RowsAffected()
if err != nil {
return 0, fmt.Errorf("read pruned %s count: %w", table, err)
}
return affected, nil
}
// PruneEvents removes audit and application logs atomically.
func (s *Store) PruneEvents(
ctx context.Context,
auditBefore time.Time,
logBefore time.Time,
) (auditCount int64, logCount int64, err error) {
tx, err := s.db.BeginTx(ctx, nil)
if err != nil {
return 0, 0, fmt.Errorf("begin event pruning: %w", err)
}
defer tx.Rollback()
auditCount, err = deleteEventsBefore(ctx, tx, `audit_events`, `created_at`, auditBefore)
if err != nil {
return 0, 0, err
}
logCount, err = deleteEventsBefore(ctx, tx, `log_events`, `event_time`, logBefore)
if err != nil {
return 0, 0, err
}
if err := tx.Commit(); err != nil {
return 0, 0, fmt.Errorf("commit event pruning: %w", err)
}
return auditCount, logCount, nil
}