mirror of
https://github.com/TeaOSLab/EdgeAPI.git
synced 2025-11-07 02:20:24 +08:00
129 lines
3.5 KiB
Go
129 lines
3.5 KiB
Go
package services
|
||
|
||
import (
|
||
"context"
|
||
"github.com/TeaOSLab/EdgeAPI/internal/accesslogs"
|
||
"github.com/TeaOSLab/EdgeAPI/internal/db/models"
|
||
rpcutils "github.com/TeaOSLab/EdgeAPI/internal/rpc/utils"
|
||
"github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb"
|
||
)
|
||
|
||
// HTTPAccessLogService 访问日志相关服务
|
||
type HTTPAccessLogService struct {
|
||
BaseService
|
||
}
|
||
|
||
// CreateHTTPAccessLogs 创建访问日志
|
||
func (this *HTTPAccessLogService) CreateHTTPAccessLogs(ctx context.Context, req *pb.CreateHTTPAccessLogsRequest) (*pb.CreateHTTPAccessLogsResponse, error) {
|
||
// 校验请求
|
||
_, _, _, err := rpcutils.ValidateRequest(ctx, rpcutils.UserTypeNode)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
if len(req.HttpAccessLogs) == 0 {
|
||
return &pb.CreateHTTPAccessLogsResponse{}, nil
|
||
}
|
||
|
||
tx := this.NullTx()
|
||
|
||
err = models.SharedHTTPAccessLogDAO.CreateHTTPAccessLogs(tx, req.HttpAccessLogs)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
// 发送到访问日志策略
|
||
policyId, err := models.SharedHTTPAccessLogPolicyDAO.FindCurrentPublicPolicyId(tx)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
if policyId > 0 {
|
||
err = accesslogs.SharedStorageManager.Write(policyId, req.HttpAccessLogs)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
}
|
||
|
||
return &pb.CreateHTTPAccessLogsResponse{}, nil
|
||
}
|
||
|
||
// ListHTTPAccessLogs 列出单页访问日志
|
||
func (this *HTTPAccessLogService) ListHTTPAccessLogs(ctx context.Context, req *pb.ListHTTPAccessLogsRequest) (*pb.ListHTTPAccessLogsResponse, error) {
|
||
// 校验请求
|
||
_, userId, err := this.ValidateAdminAndUser(ctx, 0, 0)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
tx := this.NullTx()
|
||
|
||
// 检查服务ID
|
||
if userId > 0 {
|
||
if req.UserId > 0 && userId != req.UserId {
|
||
return nil, this.PermissionError()
|
||
}
|
||
|
||
// 这里不用担心serverId <= 0 的情况，因为如果userId>0，则只会查询当前用户下的服务，不会产生安全问题
|
||
if req.ServerId > 0 {
|
||
err = models.SharedServerDAO.CheckUserServer(tx, userId, req.ServerId)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
}
|
||
}
|
||
|
||
accessLogs, requestId, hasMore, err := models.SharedHTTPAccessLogDAO.ListAccessLogs(tx, req.RequestId, req.Size, req.Day, req.ServerId, req.Reverse, req.HasError, req.FirewallPolicyId, req.FirewallRuleGroupId, req.FirewallRuleSetId, req.HasFirewallPolicy, req.UserId, req.Keyword)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
result := []*pb.HTTPAccessLog{}
|
||
for _, accessLog := range accessLogs {
|
||
a, err := accessLog.ToPB()
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
result = append(result, a)
|
||
}
|
||
|
||
return &pb.ListHTTPAccessLogsResponse{
|
||
HttpAccessLogs: result,
|
||
AccessLogs: result, // TODO 仅仅为了兼容，当用户节点版本大于0.0.8时可以删除
|
||
HasMore: hasMore,
|
||
RequestId: requestId,
|
||
}, nil
|
||
}
|
||
|
||
// FindHTTPAccessLog 查找单个日志
|
||
func (this *HTTPAccessLogService) FindHTTPAccessLog(ctx context.Context, req *pb.FindHTTPAccessLogRequest) (*pb.FindHTTPAccessLogResponse, error) {
|
||
// 校验请求
|
||
_, userId, err := this.ValidateAdminAndUser(ctx, 0, 0)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
|
||
tx := this.NullTx()
|
||
|
||
accessLog, err := models.SharedHTTPAccessLogDAO.FindAccessLogWithRequestId(tx, req.RequestId)
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
if accessLog == nil {
|
||
return &pb.FindHTTPAccessLogResponse{HttpAccessLog: nil}, nil
|
||
}
|
||
|
||
// 检查权限
|
||
if userId > 0 {
|
||
err = models.SharedServerDAO.CheckUserServer(tx, userId, int64(accessLog.ServerId))
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
}
|
||
|
||
a, err := accessLog.ToPB()
|
||
if err != nil {
|
||
return nil, err
|
||
}
|
||
return &pb.FindHTTPAccessLogResponse{HttpAccessLog: a}, nil
|
||
}
|