Jesse
85 lines
2.6 KiB
TypeScript
85 lines
2.6 KiB
TypeScript
import { NextResponse } from "next/server";
|
|
|
|
import { requireAdminSession } from "@/lib/admin/auth";
|
|
import { pageOffset, queryAdminRows } from "@/lib/admin/database";
|
|
import {
|
|
adminErrorResponse,
|
|
invalidQueryResponse,
|
|
parseListQuery,
|
|
readonlyAdminMutation,
|
|
} from "@/lib/admin/http";
|
|
|
|
export const runtime = "nodejs";
|
|
|
|
type AuditRow = {
|
|
id: string;
|
|
actor_user_id: string;
|
|
actor_email: string;
|
|
actor_role: string;
|
|
action: string;
|
|
target_type: string;
|
|
target_id: string;
|
|
before_value: Record<string, unknown> | null;
|
|
after_value: Record<string, unknown> | null;
|
|
request_id: string;
|
|
created_at: Date;
|
|
total_count: string;
|
|
};
|
|
|
|
const sortColumns = new Map([
|
|
["createdAt", "a.created_at"],
|
|
["action", "a.action"],
|
|
["actorEmail", "a.actor_email"],
|
|
]);
|
|
|
|
export const POST = readonlyAdminMutation;
|
|
export const PUT = readonlyAdminMutation;
|
|
export const PATCH = readonlyAdminMutation;
|
|
export const DELETE = readonlyAdminMutation;
|
|
|
|
export async function GET(request: Request) {
|
|
try {
|
|
await requireAdminSession();
|
|
const parsed = parseListQuery(request);
|
|
if (!parsed.success) return invalidQueryResponse(parsed.error.flatten());
|
|
const { page, pageSize, sort, order, q, status } = parsed.data;
|
|
const values: unknown[] = [];
|
|
const conditions: string[] = [];
|
|
if (q) {
|
|
values.push(`%${q}%`);
|
|
conditions.push(`(a.actor_email ilike $${values.length} or a.request_id ilike $${values.length})`);
|
|
}
|
|
if (status) {
|
|
values.push(status);
|
|
conditions.push(`a.action = $${values.length}`);
|
|
}
|
|
values.push(pageSize, pageOffset(page, pageSize));
|
|
const sortColumn = sortColumns.get(sort ?? "createdAt") ?? "a.created_at";
|
|
const rows = await queryAdminRows<AuditRow>(`
|
|
select a.*, count(*) over()::text as total_count
|
|
from audit.admin_audit_logs a
|
|
${conditions.length ? `where ${conditions.join(" and ")}` : ""}
|
|
order by ${sortColumn} ${order === "asc" ? "asc" : "desc"}, a.id asc
|
|
limit $${values.length - 1} offset $${values.length}
|
|
`, values);
|
|
return NextResponse.json({
|
|
data: rows.map((row) => ({
|
|
id: row.id,
|
|
actorUserId: row.actor_user_id,
|
|
actorEmail: row.actor_email,
|
|
actorRole: row.actor_role,
|
|
action: row.action,
|
|
targetType: row.target_type,
|
|
targetId: row.target_id,
|
|
before: row.before_value,
|
|
after: row.after_value,
|
|
requestId: row.request_id,
|
|
createdAt: row.created_at.toISOString(),
|
|
})),
|
|
total: Number(rows[0]?.total_count ?? 0),
|
|
});
|
|
} catch (error) {
|
|
return adminErrorResponse(error);
|
|
}
|
|
}
|