forked from erp-dev/erp
fix
This commit is contained in:
@@ -44,8 +44,11 @@ class ApiAuditLogMiddleware:
|
||||
|
||||
# 检查URL是否在白名单中
|
||||
if not self._is_url_matched(request.path):
|
||||
logger.debug('ApiAuditLog: URL不匹配白名单, path=%s, prefixes=%s', request.path, self.url_prefixes)
|
||||
return self.get_response(request)
|
||||
|
||||
logger.info('ApiAuditLog: 捕获到POST请求, path=%s', request.path)
|
||||
|
||||
# 在请求进入视图前,缓存请求体数据
|
||||
# 注意:request.body只能读取一次,需要在这里缓存
|
||||
request_data = self._extract_request_data(request)
|
||||
@@ -57,6 +60,8 @@ class ApiAuditLogMiddleware:
|
||||
# 获取用户信息(此时DRF的JWT认证已完成)
|
||||
user_id, username = self._get_user_info(request)
|
||||
|
||||
logger.info('ApiAuditLog: 准备发送任务, user=%s, status=%s', username, response.status_code)
|
||||
|
||||
# 异步保存审计日志
|
||||
self._save_audit_log(
|
||||
url=request.path,
|
||||
|
||||
Reference in New Issue
Block a user