@digilogiclabs/platform-core 1.15.0 → 1.16.0

package/dist/auth.mjs

@@ -1482,6 +1482,7 @@ function createSecureHandlerFactory(factoryConfig) {
       let session = null;
       let isAdmin = false;
       let isLegacyToken = false;
+      let timedAudit;
       try {
         if (routeConfig.requireAuth || routeConfig.requireAdmin || routeConfig.requireRoles?.length) {
           session = await factoryConfig.getSession();
@@ -1549,6 +1550,31 @@ function createSecureHandlerFactory(factoryConfig) {
           }
           validated = result.data;
         }
+        const actorId = isLegacyToken ? "admin_token" : session?.user?.id || "anonymous";
+        const actorType = isLegacyToken ? "admin" : "user";
+        const actorEmail = session?.user?.email ?? void 0;
+        const resourceId = routeConfig.getResourceId ? routeConfig.getResourceId(
+          request,
+          params,
+          validated
+        ) : void 0;
+        if (routeConfig.audit && factoryConfig.createTimedAudit) {
+          timedAudit = factoryConfig.createTimedAudit(
+            {
+              action: routeConfig.audit,
+              resource: routeConfig.auditResource ? {
+                type: routeConfig.auditResource,
+                id: resourceId
+              } : void 0,
+              actor: {
+                id: actorId,
+                type: actorType,
+                email: actorEmail
+              }
+            },
+            request
+          );
+        }
         const ctx = {
           session,
           isLegacyToken,
@@ -1556,20 +1582,23 @@ function createSecureHandlerFactory(factoryConfig) {
           validated,
           logger: log,
           requestId,
-          params
+          params,
+          timedAudit
         };
         const response = await handler(request, ctx);
         response.headers.set("X-Request-ID", requestId);
-        if (routeConfig.audit && factoryConfig.auditLog) {
-          const actorId = isLegacyToken ? "admin_token" : session?.user?.id || "anonymous";
+        if (routeConfig.audit && factoryConfig.auditLog && !timedAudit) {
           await factoryConfig.auditLog({
             actor: {
               id: actorId,
-              type: isLegacyToken ? "admin" : "user",
-              email: session?.user?.email ?? void 0
+              type: actorType,
+              email: actorEmail
             },
             action: routeConfig.audit,
-            resource: routeConfig.auditResource ? { type: routeConfig.auditResource, id: "unknown" } : void 0,
+            resource: routeConfig.auditResource ? {
+              type: routeConfig.auditResource,
+              id: resourceId ?? "unknown"
+            } : void 0,
             outcome: "success"
           }).catch(() => {
           });
@@ -1579,7 +1608,11 @@ function createSecureHandlerFactory(factoryConfig) {
         log.error("Request handler error", {
           error: error instanceof Error ? error.message : String(error)
         });
-        if (routeConfig.audit && factoryConfig.auditLog) {
+        const errReason = error instanceof Error ? error.message : "Unknown error";
+        if (timedAudit) {
+          await timedAudit.failure(errReason).catch(() => {
+          });
+        } else if (routeConfig.audit && factoryConfig.auditLog) {
           await factoryConfig.auditLog({
             actor: {
               id: session?.user?.id || "unknown",
@@ -1587,7 +1620,7 @@ function createSecureHandlerFactory(factoryConfig) {
             },
             action: routeConfig.audit,
             outcome: "failure",
-            reason: error instanceof Error ? error.message : "Unknown error"
+            reason: errReason
           }).catch(() => {
           });
         }