integrated audit log into pretty everything hopefully
All checks were successful
Pull Request CI / Update Deployment (pull_request) Successful in 3m28s

This commit is contained in:
2026-02-12 22:04:14 -05:00
parent 5106b72e24
commit c7d79ae586
9 changed files with 67 additions and 16 deletions

View File

@@ -8,6 +8,7 @@ import { requireLogin, requireMemberState, requireRole } from '../middleware/aut
import { assignUserGroup, createGroup, getAllRoles, getRole, getUsersWithRole } from '../services/db/rolesService';
import { Request, Response } from 'express';
import { logger } from '../services/logging/logger';
import { audit } from '../services/logging/auditLog';
r.use(requireLogin)
ur.use(requireLogin)
@@ -22,6 +23,8 @@ ur.post('/', [requireMemberState(MemberState.Member), requireRole("17th Administ
logger.info('app', 'User assigned role', { user: body.member_id, role: body.role_id, assigner: req.user.id })
res.sendStatus(201);
audit.roles('add_member', { actorId: req.user.id, targetId: body.role_id }, { member: body.member_id, role: body.role_id });
} catch (error) {
if (error?.code === 'ER_DUP_ENTRY') {
return res.status(400).json({
@@ -54,6 +57,7 @@ ur.delete('/', [requireMemberState(MemberState.Member), requireRole("17th Admini
await pool.query(sql, [body.member_id, body.role_id])
logger.info('app', 'User removed role', { user: body.member_id, role: body.role_id, assigner: req.user.id })
audit.roles('remove_member', { actorId: req.user.id, targetId: body.role_id }, { member: body.member_id, role: body.role_id });
res.sendStatus(200);
}
@@ -77,7 +81,7 @@ ur.delete('/', [requireMemberState(MemberState.Member), requireRole("17th Admini
r.get('/', [requireMemberState(MemberState.Member)], async (req, res) => {
try {
const roles = await getAllRoles();
res.status(200).json(roles);
} catch (error) {
logger.error(
@@ -144,7 +148,8 @@ r.post('/', [requireMemberState(MemberState.Member), requireRole("dev")], async
return res.status(400).json({ error: 'Color must be a valid hex color (#ffffff)' });
}
await createGroup(name, color, description);
let out = await createGroup(name, color, description);
audit.roles('create', { actorId: req.user.id, targetId: out.id });
res.sendStatus(201);
} catch (err) {
@@ -159,6 +164,9 @@ r.delete('/:id', [requireMemberState(MemberState.Member), requireRole("dev")], a
const sql = 'DELETE FROM roles WHERE id = ?';
const res = await pool.query(sql, [id]);
audit.roles('delete', { actorId: req.user.id, targetId: id });
res.sendStatus(200);
} catch (error) {
console.error(error);