Mazyar
55 lines
1.0 KiB
Go
55 lines
1.0 KiB
Go
package audit
|
|
|
|
import (
|
|
"context"
|
|
"time"
|
|
|
|
"tm/pkg/logger"
|
|
)
|
|
|
|
const ActionPasswordReset = "password.reset"
|
|
|
|
// TargetType values for audit entries.
|
|
const (
|
|
TargetTypeAdmin = "admin"
|
|
TargetTypeCustomer = "customer"
|
|
)
|
|
|
|
// Entry represents a security-relevant audit event.
|
|
type Entry struct {
|
|
ActorID string
|
|
TargetType string
|
|
TargetID string
|
|
Action string
|
|
At int64
|
|
}
|
|
|
|
// Logger records audit events.
|
|
type Logger interface {
|
|
Log(ctx context.Context, entry Entry)
|
|
}
|
|
|
|
type auditLogger struct {
|
|
logger logger.Logger
|
|
}
|
|
|
|
// NewLogger creates an audit logger backed by structured application logs.
|
|
func NewLogger(log logger.Logger) Logger {
|
|
return &auditLogger{logger: log}
|
|
}
|
|
|
|
func (a *auditLogger) Log(ctx context.Context, entry Entry) {
|
|
if entry.At == 0 {
|
|
entry.At = time.Now().Unix()
|
|
}
|
|
|
|
a.logger.Info("audit event", map[string]interface{}{
|
|
"audit": true,
|
|
"actor_id": entry.ActorID,
|
|
"target_type": entry.TargetType,
|
|
"target_id": entry.TargetID,
|
|
"action": entry.Action,
|
|
"at": entry.At,
|
|
})
|
|
}
|