Archived
129 lines
3.5 KiB
Go
129 lines
3.5 KiB
Go
package services
|
|
|
|
import (
|
|
"context"
|
|
"github.com/TeaOSLab/EdgeAPI/internal/accesslogs"
|
|
"github.com/TeaOSLab/EdgeAPI/internal/db/models"
|
|
rpcutils "github.com/TeaOSLab/EdgeAPI/internal/rpc/utils"
|
|
"github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb"
|
|
)
|
|
|
|
// HTTPAccessLogService 访问日志相关服务
|
|
type HTTPAccessLogService struct {
|
|
BaseService
|
|
}
|
|
|
|
// CreateHTTPAccessLogs 创建访问日志
|
|
func (this *HTTPAccessLogService) CreateHTTPAccessLogs(ctx context.Context, req *pb.CreateHTTPAccessLogsRequest) (*pb.CreateHTTPAccessLogsResponse, error) {
|
|
// 校验请求
|
|
_, _, _, err := rpcutils.ValidateRequest(ctx, rpcutils.UserTypeNode)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
if len(req.HttpAccessLogs) == 0 {
|
|
return &pb.CreateHTTPAccessLogsResponse{}, nil
|
|
}
|
|
|
|
tx := this.NullTx()
|
|
|
|
err = models.SharedHTTPAccessLogDAO.CreateHTTPAccessLogs(tx, req.HttpAccessLogs)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
// 发送到访问日志策略
|
|
policyId, err := models.SharedHTTPAccessLogPolicyDAO.FindCurrentPublicPolicyId(tx)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if policyId > 0 {
|
|
err = accesslogs.SharedStorageManager.Write(policyId, req.HttpAccessLogs)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
}
|
|
|
|
return &pb.CreateHTTPAccessLogsResponse{}, nil
|
|
}
|
|
|
|
// ListHTTPAccessLogs 列出单页访问日志
|
|
func (this *HTTPAccessLogService) ListHTTPAccessLogs(ctx context.Context, req *pb.ListHTTPAccessLogsRequest) (*pb.ListHTTPAccessLogsResponse, error) {
|
|
// 校验请求
|
|
_, userId, err := this.ValidateAdminAndUser(ctx, 0, 0)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
tx := this.NullTx()
|
|
|
|
// 检查服务ID
|
|
if userId > 0 {
|
|
if req.UserId > 0 && userId != req.UserId {
|
|
return nil, this.PermissionError()
|
|
}
|
|
|
|
// 这里不用担心serverId <= 0 的情况，因为如果userId>0，则只会查询当前用户下的服务，不会产生安全问题
|
|
if req.ServerId > 0 {
|
|
err = models.SharedServerDAO.CheckUserServer(tx, userId, req.ServerId)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
}
|
|
}
|
|
|
|
accessLogs, requestId, hasMore, err := models.SharedHTTPAccessLogDAO.ListAccessLogs(tx, req.RequestId, req.Size, req.Day, req.ServerId, req.Reverse, req.HasError, req.FirewallPolicyId, req.FirewallRuleGroupId, req.FirewallRuleSetId, req.HasFirewallPolicy, req.UserId, req.Keyword, req.Ip, req.Domain)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
result := []*pb.HTTPAccessLog{}
|
|
for _, accessLog := range accessLogs {
|
|
a, err := accessLog.ToPB()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
result = append(result, a)
|
|
}
|
|
|
|
return &pb.ListHTTPAccessLogsResponse{
|
|
HttpAccessLogs: result,
|
|
AccessLogs: result, // TODO 仅仅为了兼容，当用户节点版本大于0.0.8时可以删除
|
|
HasMore: hasMore,
|
|
RequestId: requestId,
|
|
}, nil
|
|
}
|
|
|
|
// FindHTTPAccessLog 查找单个日志
|
|
func (this *HTTPAccessLogService) FindHTTPAccessLog(ctx context.Context, req *pb.FindHTTPAccessLogRequest) (*pb.FindHTTPAccessLogResponse, error) {
|
|
// 校验请求
|
|
_, userId, err := this.ValidateAdminAndUser(ctx, 0, 0)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
tx := this.NullTx()
|
|
|
|
accessLog, err := models.SharedHTTPAccessLogDAO.FindAccessLogWithRequestId(tx, req.RequestId)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if accessLog == nil {
|
|
return &pb.FindHTTPAccessLogResponse{HttpAccessLog: nil}, nil
|
|
}
|
|
|
|
// 检查权限
|
|
if userId > 0 {
|
|
err = models.SharedServerDAO.CheckUserServer(tx, userId, int64(accessLog.ServerId))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
}
|
|
|
|
a, err := accessLog.ToPB()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return &pb.FindHTTPAccessLogResponse{HttpAccessLog: a}, nil
|
|
}
|