230 lines
7.9 KiB
Python
230 lines
7.9 KiB
Python
|
# -*- coding: utf-8 -*-
|
|||
|
|
"""
|
|||
|
|
业务日志记录工具
|
|||
|
|
用于记录所有 POST/PUT/DELETE 操作到 ai_logs 表
|
|||
|
|
"""
|
|||
|
|
|
|||
|
|
import logging
|
|||
|
|
import json
|
|||
|
|
from datetime import datetime
|
|||
|
|
from flask import request, g
|
|||
|
|
from database_config import get_db_manager
|
|||
|
|
from auth_utils import AuthUtils
|
|||
|
|
|
|||
|
|
logger = logging.getLogger('article_server')
|
|||
|
|
|
|||
|
|
class BusinessLogger:
|
|||
|
|
"""业务日志记录器"""
|
|||
|
|
|
|||
|
|
@staticmethod
|
|||
|
|
def log_operation(
|
|||
|
|
action,
|
|||
|
|
target_type=None,
|
|||
|
|
target_id=None,
|
|||
|
|
description=None,
|
|||
|
|
request_data=None,
|
|||
|
|
response_data=None,
|
|||
|
|
status='success',
|
|||
|
|
error_message=None
|
|||
|
|
):
|
|||
|
|
"""
|
|||
|
|
记录业务操作日志到 ai_logs 表
|
|||
|
|
|
|||
|
|
Args:
|
|||
|
|
action: 操作动作（如：create_enterprise, update_product, delete_image）
|
|||
|
|
target_type: 目标类型（如：enterprise, product, employee）
|
|||
|
|
target_id: 目标ID
|
|||
|
|
description: 操作描述
|
|||
|
|
request_data: 请求数据（dict）
|
|||
|
|
response_data: 响应数据（dict）
|
|||
|
|
status: 状态（success/error/warning）
|
|||
|
|
error_message: 错误消息
|
|||
|
|
"""
|
|||
|
|
try:
|
|||
|
|
# 获取当前用户信息
|
|||
|
|
current_user = AuthUtils.get_current_user()
|
|||
|
|
user_id = current_user.get('user_id') if current_user else None
|
|||
|
|
|
|||
|
|
# 获取IP地址
|
|||
|
|
ip_address = request.environ.get('HTTP_X_FORWARDED_FOR',
|
|||
|
|
request.environ.get('REMOTE_ADDR', '未知'))
|
|||
|
|
# 处理多个代理的情况
|
|||
|
|
if ip_address and ',' in ip_address:
|
|||
|
|
ip_address = ip_address.split(',')[0].strip()
|
|||
|
|
|
|||
|
|
# 获取User-Agent
|
|||
|
|
user_agent = request.headers.get('User-Agent', '未知')
|
|||
|
|
|
|||
|
|
# 转换数据为JSON格式（过滤敏感信息）
|
|||
|
|
request_json = None
|
|||
|
|
if request_data:
|
|||
|
|
# 过滤密码等敏感字段
|
|||
|
|
filtered_request = BusinessLogger._filter_sensitive_data(request_data)
|
|||
|
|
request_json = json.dumps(filtered_request, ensure_ascii=False)
|
|||
|
|
|
|||
|
|
response_json = None
|
|||
|
|
if response_data:
|
|||
|
|
# 过滤敏感响应数据
|
|||
|
|
filtered_response = BusinessLogger._filter_sensitive_data(response_data)
|
|||
|
|
response_json = json.dumps(filtered_response, ensure_ascii=False)
|
|||
|
|
|
|||
|
|
# 插入日志记录
|
|||
|
|
db_manager = get_db_manager()
|
|||
|
|
sql = """
|
|||
|
|
INSERT INTO ai_logs
|
|||
|
|
(user_id, action, target_type, target_id, description,
|
|||
|
|
ip_address, user_agent, request_data, response_data,
|
|||
|
|
status, error_message, created_at)
|
|||
|
|
VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, NOW())
|
|||
|
|
"""
|
|||
|
|
|
|||
|
|
params = (
|
|||
|
|
user_id,
|
|||
|
|
action,
|
|||
|
|
target_type,
|
|||
|
|
target_id,
|
|||
|
|
description,
|
|||
|
|
ip_address[:45] if ip_address else None, # 限制长度
|
|||
|
|
user_agent[:500] if user_agent else None, # 限制长度
|
|||
|
|
request_json,
|
|||
|
|
response_json,
|
|||
|
|
status,
|
|||
|
|
error_message[:1000] if error_message else None # 限制长度
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
log_id = db_manager.execute_insert(sql, params)
|
|||
|
|
|
|||
|
|
# 记录到应用日志
|
|||
|
|
logger.info(
|
|||
|
|
f"[业务日志] 操作: {action} | "
|
|||
|
|
f"用户ID: {user_id} | "
|
|||
|
|
f"目标: {target_type}#{target_id} | "
|
|||
|
|
f"状态: {status} | "
|
|||
|
|
f"IP: {ip_address} | "
|
|||
|
|
f"日志ID: {log_id}"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
return log_id
|
|||
|
|
|
|||
|
|
except Exception as e:
|
|||
|
|
# 日志记录失败不应影响业务流程
|
|||
|
|
logger.error(f"[业务日志] 记录失败: {e}", exc_info=True)
|
|||
|
|
return None
|
|||
|
|
|
|||
|
|
@staticmethod
|
|||
|
|
def _filter_sensitive_data(data):
|
|||
|
|
"""过滤敏感数据"""
|
|||
|
|
if not isinstance(data, dict):
|
|||
|
|
return data
|
|||
|
|
|
|||
|
|
sensitive_fields = [
|
|||
|
|
'password', 'old_password', 'new_password',
|
|||
|
|
'confirm_password', 'token', 'secret', 'key'
|
|||
|
|
]
|
|||
|
|
|
|||
|
|
filtered = {}
|
|||
|
|
for key, value in data.items():
|
|||
|
|
if key.lower() in sensitive_fields:
|
|||
|
|
filtered[key] = '***' # 隐藏敏感信息
|
|||
|
|
elif isinstance(value, dict):
|
|||
|
|
filtered[key] = BusinessLogger._filter_sensitive_data(value)
|
|||
|
|
else:
|
|||
|
|
filtered[key] = value
|
|||
|
|
|
|||
|
|
return filtered
|
|||
|
|
|
|||
|
|
@staticmethod
|
|||
|
|
def log_create(target_type, target_id, description=None, request_data=None, response_data=None):
|
|||
|
|
"""记录创建操作"""
|
|||
|
|
return BusinessLogger.log_operation(
|
|||
|
|
action=f'create_{target_type}',
|
|||
|
|
target_type=target_type,
|
|||
|
|
target_id=target_id,
|
|||
|
|
description=description or f'创建{target_type}',
|
|||
|
|
request_data=request_data,
|
|||
|
|
response_data=response_data,
|
|||
|
|
status='success'
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
@staticmethod
|
|||
|
|
def log_update(target_type, target_id, description=None, request_data=None, response_data=None):
|
|||
|
|
"""记录更新操作"""
|
|||
|
|
return BusinessLogger.log_operation(
|
|||
|
|
action=f'update_{target_type}',
|
|||
|
|
target_type=target_type,
|
|||
|
|
target_id=target_id,
|
|||
|
|
description=description or f'更新{target_type}',
|
|||
|
|
request_data=request_data,
|
|||
|
|
response_data=response_data,
|
|||
|
|
status='success'
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
@staticmethod
|
|||
|
|
def log_delete(target_type, target_id, description=None, request_data=None):
|
|||
|
|
"""记录删除操作"""
|
|||
|
|
return BusinessLogger.log_operation(
|
|||
|
|
action=f'delete_{target_type}',
|
|||
|
|
target_type=target_type,
|
|||
|
|
target_id=target_id,
|
|||
|
|
description=description or f'删除{target_type}',
|
|||
|
|
request_data=request_data,
|
|||
|
|
status='success'
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
@staticmethod
|
|||
|
|
def log_error(action, target_type=None, target_id=None, error_message=None, request_data=None):
|
|||
|
|
"""记录错误操作"""
|
|||
|
|
return BusinessLogger.log_operation(
|
|||
|
|
action=action,
|
|||
|
|
target_type=target_type,
|
|||
|
|
target_id=target_id,
|
|||
|
|
description=f'{action} 失败',
|
|||
|
|
request_data=request_data,
|
|||
|
|
status='error',
|
|||
|
|
error_message=error_message
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
@staticmethod
|
|||
|
|
def log_login(user_id, username, success=True, error_message=None):
|
|||
|
|
"""记录登录操作"""
|
|||
|
|
return BusinessLogger.log_operation(
|
|||
|
|
action='user_login',
|
|||
|
|
target_type='user',
|
|||
|
|
target_id=user_id,
|
|||
|
|
description=f'用户登录: {username}',
|
|||
|
|
status='success' if success else 'error',
|
|||
|
|
error_message=error_message
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
@staticmethod
|
|||
|
|
def log_logout(user_id, username):
|
|||
|
|
"""记录登出操作"""
|
|||
|
|
return BusinessLogger.log_operation(
|
|||
|
|
action='user_logout',
|
|||
|
|
target_type='user',
|
|||
|
|
target_id=user_id,
|
|||
|
|
description=f'用户登出: {username}',
|
|||
|
|
status='success'
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
# 快捷方法
|
|||
|
|
def log_create(target_type, target_id, **kwargs):
|
|||
|
|
"""快捷记录创建操作"""
|
|||
|
|
return BusinessLogger.log_create(target_type, target_id, **kwargs)
|
|||
|
|
|
|||
|
|
def log_update(target_type, target_id, **kwargs):
|
|||
|
|
"""快捷记录更新操作"""
|
|||
|
|
return BusinessLogger.log_update(target_type, target_id, **kwargs)
|
|||
|
|
|
|||
|
|
def log_delete(target_type, target_id, **kwargs):
|
|||
|
|
"""快捷记录删除操作"""
|
|||
|
|
return BusinessLogger.log_delete(target_type, target_id, **kwargs)
|
|||
|
|
|
|||
|
|
def log_error(action, **kwargs):
|
|||
|
|
"""快捷记录错误操作"""
|
|||
|
|
return BusinessLogger.log_error(action, **kwargs)
|
|||
|
|
|
|||
|
|
def log_operation(**kwargs):
|
|||
|
|
"""快捷记录通用操作"""
|
|||
|
|
return BusinessLogger.log_operation(**kwargs)
|