forked from erp-dev/erp
fix
This commit is contained in:
@@ -44,8 +44,11 @@ class ApiAuditLogMiddleware:
|
|||||||
|
|
||||||
# 检查URL是否在白名单中
|
# 检查URL是否在白名单中
|
||||||
if not self._is_url_matched(request.path):
|
if not self._is_url_matched(request.path):
|
||||||
|
logger.debug('ApiAuditLog: URL不匹配白名单, path=%s, prefixes=%s', request.path, self.url_prefixes)
|
||||||
return self.get_response(request)
|
return self.get_response(request)
|
||||||
|
|
||||||
|
logger.info('ApiAuditLog: 捕获到POST请求, path=%s', request.path)
|
||||||
|
|
||||||
# 在请求进入视图前,缓存请求体数据
|
# 在请求进入视图前,缓存请求体数据
|
||||||
# 注意:request.body只能读取一次,需要在这里缓存
|
# 注意:request.body只能读取一次,需要在这里缓存
|
||||||
request_data = self._extract_request_data(request)
|
request_data = self._extract_request_data(request)
|
||||||
@@ -57,6 +60,8 @@ class ApiAuditLogMiddleware:
|
|||||||
# 获取用户信息(此时DRF的JWT认证已完成)
|
# 获取用户信息(此时DRF的JWT认证已完成)
|
||||||
user_id, username = self._get_user_info(request)
|
user_id, username = self._get_user_info(request)
|
||||||
|
|
||||||
|
logger.info('ApiAuditLog: 准备发送任务, user=%s, status=%s', username, response.status_code)
|
||||||
|
|
||||||
# 异步保存审计日志
|
# 异步保存审计日志
|
||||||
self._save_audit_log(
|
self._save_audit_log(
|
||||||
url=request.path,
|
url=request.path,
|
||||||
|
|||||||
Reference in New Issue
Block a user