mirror of
https://github.com/penpot/penpot.git
synced 2025-05-24 04:06:12 +02:00
124 lines
3.5 KiB
Clojure
124 lines
3.5 KiB
Clojure
;; This Source Code Form is subject to the terms of the Mozilla Public
|
|
;; License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
;; file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
;;
|
|
;; Copyright (c) KALEIDOS INC
|
|
|
|
(ns app.rpc.commands.audit
|
|
"Audit Log related RPC methods"
|
|
(:require
|
|
[app.common.data :as d]
|
|
[app.common.logging :as l]
|
|
[app.common.schema :as sm]
|
|
[app.common.uuid :as uuid]
|
|
[app.config :as cf]
|
|
[app.db :as db]
|
|
[app.http :as-alias http]
|
|
[app.loggers.audit :as-alias audit]
|
|
[app.rpc :as-alias rpc]
|
|
[app.rpc.climit :as-alias climit]
|
|
[app.rpc.doc :as-alias doc]
|
|
[app.rpc.helpers :as rph]
|
|
[app.util.inet :as inet]
|
|
[app.util.services :as sv]
|
|
[app.util.time :as dt]))
|
|
|
|
(def ^:private event-columns
|
|
[:id
|
|
:name
|
|
:source
|
|
:type
|
|
:tracked-at
|
|
:created-at
|
|
:profile-id
|
|
:ip-addr
|
|
:props
|
|
:context])
|
|
|
|
(defn- event->row [event]
|
|
[(uuid/next)
|
|
(:name event)
|
|
(:source event)
|
|
(:type event)
|
|
(:timestamp event)
|
|
(:created-at event)
|
|
(:profile-id event)
|
|
(db/inet (:ip-addr event))
|
|
(db/tjson (:props event))
|
|
(db/tjson (d/without-nils (:context event)))])
|
|
|
|
(defn- adjust-timestamp
|
|
[{:keys [timestamp created-at] :as event}]
|
|
(let [margin (inst-ms (dt/diff timestamp created-at))]
|
|
(if (or (neg? margin)
|
|
(> margin 3600000))
|
|
;; If event is in future or lags more than 1 hour, we reasign
|
|
;; timestamp to the server creation date
|
|
(-> event
|
|
(assoc :timestamp created-at)
|
|
(update :context assoc :original-timestamp timestamp))
|
|
event)))
|
|
|
|
(defn- handle-events
|
|
[{:keys [::db/pool]} {:keys [::rpc/profile-id events] :as params}]
|
|
(let [request (-> params meta ::http/request)
|
|
ip-addr (inet/parse-request request)
|
|
tnow (dt/now)
|
|
xform (comp
|
|
(map (fn [event]
|
|
(-> event
|
|
(assoc :created-at tnow)
|
|
(assoc :profile-id profile-id)
|
|
(assoc :ip-addr ip-addr)
|
|
(assoc :source "frontend"))))
|
|
(filter :profile-id)
|
|
(map adjust-timestamp)
|
|
(map event->row))
|
|
events (sequence xform events)]
|
|
(when (seq events)
|
|
(db/insert-many! pool :audit-log event-columns events))))
|
|
|
|
(def valid-event-types
|
|
#{"action" "identify"})
|
|
|
|
(def schema:event
|
|
[:map {:title "Event"}
|
|
[:name
|
|
[:and {:gen/elements ["update-file", "get-profile"]}
|
|
[:string {:max 250}]
|
|
[:re #"[\d\w-]{1,50}"]]]
|
|
[:type
|
|
[:and {:gen/elements valid-event-types}
|
|
[:string {:max 250}]
|
|
[::sm/one-of {:format "string"} valid-event-types]]]
|
|
[:props
|
|
[:map-of :keyword :any]]
|
|
[:context {:optional true}
|
|
[:map-of :keyword :any]]])
|
|
|
|
(def schema:push-audit-events
|
|
[:map {:title "push-audit-events"}
|
|
[:events [:vector schema:event]]])
|
|
|
|
(sv/defmethod ::push-audit-events
|
|
{::climit/id :submit-audit-events/by-profile
|
|
::climit/key-fn ::rpc/profile-id
|
|
::sm/params schema:push-audit-events
|
|
::audit/skip true
|
|
::doc/skip true
|
|
::doc/added "1.17"}
|
|
[{:keys [::db/pool] :as cfg} params]
|
|
(if (or (db/read-only? pool)
|
|
(not (contains? cf/flags :audit-log)))
|
|
(do
|
|
(l/warn :hint "audit: http handler disabled or db is read-only")
|
|
(rph/wrap nil))
|
|
|
|
(do
|
|
(try
|
|
(handle-events cfg params)
|
|
(catch Throwable cause
|
|
(l/error :hint "unexpected error on persisting audit events from frontend"
|
|
:cause cause)))
|
|
|
|
(rph/wrap nil))))
|