@payfit/audit-log 3.5.0-rc.27 → 3.5.0-rc.29
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.d.ts +1 -1
- package/dist/index.js +1 -1
- package/dist/index.mjs +32 -28
- package/dist/transport/implementation.d.ts +2 -2
- package/package.json +1 -1
package/dist/index.d.ts
CHANGED
|
@@ -12,7 +12,7 @@ export type AuditTargets = 'reporting' | 'employee' | 'employee.settings' | 'emp
|
|
|
12
12
|
/**
|
|
13
13
|
* The allowed Events for the AuditLog
|
|
14
14
|
*/
|
|
15
|
-
export type AuditEvents = 'create' | 'update' | 'share' | 'delete' | 'view' | 'sign' | 'signin' | 'signinFail' | 'signinAs' | 'logout' | 'updateCurrentAccount' | 'merge' | 'disable' | 'sendResetPasswordLink' | 'enable' | 'verify' | 'read' | 'write' | 'subscribe' | 'consume' | 'setup' | 'deleteAllAdmins' | 'import';
|
|
15
|
+
export type AuditEvents = 'create' | 'update' | 'share' | 'delete' | 'view' | 'sign' | 'signin' | 'signinFail' | 'signinAs' | 'logout' | 'updateCurrentAccount' | 'merge' | 'disable' | 'sendResetPasswordLink' | 'enable' | 'verify' | 'read' | 'write' | 'subscribe' | 'consume' | 'setup' | 'deleteAllAdmins' | 'import' | 'useAccount';
|
|
16
16
|
/**
|
|
17
17
|
* Data to audit log.
|
|
18
18
|
*/
|
package/dist/index.js
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
"use strict";var
|
|
1
|
+
"use strict";var p=Object.defineProperty;var w=(s,e,t)=>e in s?p(s,e,{enumerable:!0,configurable:!0,writable:!0,value:t}):s[e]=t;var i=(s,e,t)=>(w(s,typeof e!="symbol"?e+"":e,t),t);Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const S=require("uuid"),o=require("winston"),v=require("hot-shots"),h=require("@aws-sdk/client-sqs"),y=require("zlib"),E="audit-logs",_="@payfit/audit-log",q=()=>{const s=process.env.LOG_LEVEL;return s&&s.trim()!==""?s.trim():"info"},L=(s,e)=>o.createLogger({level:q(),silent:process.env.NODE_ENV==="test",exitOnError:!1,defaultMeta:{namespace:E,sdk:_,service:s,environment:e},format:o.format.combine(o.format.timestamp(),o.format.errors({stack:!0}),o.format.json()),transports:[new o.transports.Console]}),M="payfit.audit_logs.",f=s=>Object.entries(s).filter(([,e])=>e!==void 0&&e!=="").map(([e,t])=>`${e}:${String(t)}`);class b{constructor(){i(this,"client");this.client=new v.StatsD({prefix:M,errorHandler:()=>{},cacheDns:!0})}increment(e,t){this.client.increment(e,1,f(t))}histogram(e,t,n){this.client.histogram(e,t,f(n))}async close(){await new Promise(e=>{this.client.close(()=>e())})}}const A=()=>new b;function U(s){return y.brotliCompressSync(Buffer.from(s,"utf8")).toString("base64")}function C(s){return s instanceof Error&&s.message.includes("Message must be shorter than")}const O="eu-west-3",z={dev:"https://sqs.eu-west-3.amazonaws.com/533547282673/audit-logs-ingest",staging:"https://sqs.eu-west-3.amazonaws.com/589883667243/audit-logs-ingest",prod:"https://sqs.eu-west-3.amazonaws.com/614948436281/audit-logs-ingest"},D={working:"staging",production:"prod"};class N{constructor(e,t){i(this,"environment");i(this,"logger");i(this,"client");i(this,"queueUrl");this.environment=e,this.logger=t;const n=D[e]??e;if(this.queueUrl=z[n],!this.queueUrl){t==null||t.warn("audit-logs SDK: no SQS queue URL configured for this environment, audit logs are disabled",{environment:e});return}this.client=new h.SQSClient({region:O})}async create(e){var n;if(!this.client||!this.queueUrl)return{compressed:!1};const t=JSON.stringify(e);try{return await this.send(t),{compressed:!1}}catch(c){if(!C(c))throw c;return(n=this.logger)==null||n.info("audit-log payload exceeds the SQS size limit, retrying with Brotli compression",{id:e.id,namespace:e.namespace}),await this.send(U(t)),{compressed:!0}}}async send(e){await this.client.send(new h.SendMessageCommand({QueueUrl:this.queueUrl,MessageBody:e}))}}class Q{constructor(e,t={}){i(this,"params");i(this,"transport");i(this,"logger");i(this,"metrics");this.params=e,this.logger=t.logger??L(e.service,e.environment),this.transport=t.transport??new N(e.environment,this.logger),this.metrics=t.metrics??A()}async log({scope:e,account:t,...n}){const c=S.v4(),{environment:g,service:u}=this.params,r={...n,...t,service:u,id:c,environment:g,...e&&{scope:e}},a={service:u,environment:g,namespace:r.namespace,event:r.event,target:r.target},m=Date.now();try{const{compressed:l}=await this.transport.create(r);this.metrics.increment("sent",{...a,compressed:String(l)}),this.metrics.histogram("send_duration_ms",Date.now()-m,a),this.logger.debug("audit-log sent",{id:r.id,event:r.event,target:r.target})}catch(l){this.metrics.increment("send_failed",a),this.metrics.histogram("send_duration_ms",Date.now()-m,a);const d=l.message;try{this.logger.error("audit-log write failed",{audit_log:r,error:d})}catch{this.metrics.increment("serialization_failed",a);try{this.logger.error("audit-log write failed (serialization failed)",{audit_log_meta:{id:r.id,service:r.service,environment:r.environment,namespace:r.namespace,event:r.event,target:r.target},error:d})}catch{}}}}}exports.AuditLogger=Q;
|
package/dist/index.mjs
CHANGED
|
@@ -6,11 +6,11 @@ import { createLogger as v, format as c, transports as S } from "winston";
|
|
|
6
6
|
import { StatsD as E } from "hot-shots";
|
|
7
7
|
import { SQSClient as _, SendMessageCommand as y } from "@aws-sdk/client-sqs";
|
|
8
8
|
import { brotliCompressSync as L } from "zlib";
|
|
9
|
-
const M = "audit-logs", A = "@payfit/audit-log",
|
|
9
|
+
const M = "audit-logs", A = "@payfit/audit-log", U = () => {
|
|
10
10
|
const s = process.env.LOG_LEVEL;
|
|
11
11
|
return s && s.trim() !== "" ? s.trim() : "info";
|
|
12
|
-
},
|
|
13
|
-
level:
|
|
12
|
+
}, q = (s, e) => v({
|
|
13
|
+
level: U(),
|
|
14
14
|
silent: process.env.NODE_ENV === "test",
|
|
15
15
|
exitOnError: !1,
|
|
16
16
|
defaultMeta: {
|
|
@@ -21,12 +21,12 @@ const M = "audit-logs", A = "@payfit/audit-log", C = () => {
|
|
|
21
21
|
},
|
|
22
22
|
format: c.combine(c.timestamp(), c.errors({ stack: !0 }), c.json()),
|
|
23
23
|
transports: [new S.Console()]
|
|
24
|
-
}),
|
|
24
|
+
}), C = "payfit.audit_logs.", h = (s) => Object.entries(s).filter(([, e]) => e !== void 0 && e !== "").map(([e, t]) => `${e}:${String(t)}`);
|
|
25
25
|
class b {
|
|
26
26
|
constructor() {
|
|
27
27
|
i(this, "client");
|
|
28
28
|
this.client = new E({
|
|
29
|
-
prefix:
|
|
29
|
+
prefix: C,
|
|
30
30
|
// Loss of metrics never breaks the caller — DogStatsD UDP is best-effort by design.
|
|
31
31
|
errorHandler: () => {
|
|
32
32
|
},
|
|
@@ -67,19 +67,23 @@ class k {
|
|
|
67
67
|
i(this, "client");
|
|
68
68
|
i(this, "queueUrl");
|
|
69
69
|
this.environment = e, this.logger = t;
|
|
70
|
-
const n = R[e] ?? e
|
|
71
|
-
if (!
|
|
72
|
-
|
|
73
|
-
|
|
70
|
+
const n = R[e] ?? e;
|
|
71
|
+
if (this.queueUrl = Q[n], !this.queueUrl) {
|
|
72
|
+
t == null || t.warn("audit-logs SDK: no SQS queue URL configured for this environment, audit logs are disabled", { environment: e });
|
|
73
|
+
return;
|
|
74
|
+
}
|
|
75
|
+
this.client = new _({ region: z });
|
|
74
76
|
}
|
|
75
77
|
async create(e) {
|
|
76
78
|
var n;
|
|
79
|
+
if (!this.client || !this.queueUrl)
|
|
80
|
+
return { compressed: !1 };
|
|
77
81
|
const t = JSON.stringify(e);
|
|
78
82
|
try {
|
|
79
83
|
return await this.send(t), { compressed: !1 };
|
|
80
|
-
} catch (
|
|
81
|
-
if (!O(
|
|
82
|
-
throw
|
|
84
|
+
} catch (a) {
|
|
85
|
+
if (!O(a))
|
|
86
|
+
throw a;
|
|
83
87
|
return (n = this.logger) == null || n.info("audit-log payload exceeds the SQS size limit, retrying with Brotli compression", { id: e.id, namespace: e.namespace }), await this.send(N(t)), { compressed: !0 };
|
|
84
88
|
}
|
|
85
89
|
}
|
|
@@ -96,43 +100,43 @@ class V {
|
|
|
96
100
|
i(this, "transport");
|
|
97
101
|
i(this, "logger");
|
|
98
102
|
i(this, "metrics");
|
|
99
|
-
this.params = e, this.logger = t.logger ??
|
|
103
|
+
this.params = e, this.logger = t.logger ?? q(e.service, e.environment), this.transport = t.transport ?? new k(e.environment, this.logger), this.metrics = t.metrics ?? D();
|
|
100
104
|
}
|
|
101
105
|
async log({ scope: e, account: t, ...n }) {
|
|
102
|
-
const
|
|
106
|
+
const a = w(), { environment: l, service: g } = this.params, r = {
|
|
103
107
|
...n,
|
|
104
108
|
...t,
|
|
105
|
-
service:
|
|
106
|
-
id:
|
|
107
|
-
environment:
|
|
109
|
+
service: g,
|
|
110
|
+
id: a,
|
|
111
|
+
environment: l,
|
|
108
112
|
...e && { scope: e }
|
|
109
|
-
},
|
|
110
|
-
service:
|
|
111
|
-
environment:
|
|
113
|
+
}, o = {
|
|
114
|
+
service: g,
|
|
115
|
+
environment: l,
|
|
112
116
|
namespace: r.namespace,
|
|
113
117
|
event: r.event,
|
|
114
118
|
target: r.target
|
|
115
119
|
}, d = Date.now();
|
|
116
120
|
try {
|
|
117
|
-
const { compressed:
|
|
121
|
+
const { compressed: m } = await this.transport.create(r);
|
|
118
122
|
this.metrics.increment("sent", {
|
|
119
|
-
...
|
|
120
|
-
compressed: String(
|
|
121
|
-
}), this.metrics.histogram("send_duration_ms", Date.now() - d,
|
|
123
|
+
...o,
|
|
124
|
+
compressed: String(m)
|
|
125
|
+
}), this.metrics.histogram("send_duration_ms", Date.now() - d, o), this.logger.debug("audit-log sent", {
|
|
122
126
|
id: r.id,
|
|
123
127
|
event: r.event,
|
|
124
128
|
target: r.target
|
|
125
129
|
});
|
|
126
|
-
} catch (
|
|
127
|
-
this.metrics.increment("send_failed",
|
|
128
|
-
const u =
|
|
130
|
+
} catch (m) {
|
|
131
|
+
this.metrics.increment("send_failed", o), this.metrics.histogram("send_duration_ms", Date.now() - d, o);
|
|
132
|
+
const u = m.message;
|
|
129
133
|
try {
|
|
130
134
|
this.logger.error("audit-log write failed", {
|
|
131
135
|
audit_log: r,
|
|
132
136
|
error: u
|
|
133
137
|
});
|
|
134
138
|
} catch {
|
|
135
|
-
this.metrics.increment("serialization_failed",
|
|
139
|
+
this.metrics.increment("serialization_failed", o);
|
|
136
140
|
try {
|
|
137
141
|
this.logger.error("audit-log write failed (serialization failed)", {
|
|
138
142
|
audit_log_meta: {
|
|
@@ -3,8 +3,8 @@ import { IAuditLogCreationData, IAuditLogCreationResult, IAuditLogTransport } fr
|
|
|
3
3
|
export declare class Transport implements IAuditLogTransport {
|
|
4
4
|
protected environment: string;
|
|
5
5
|
private logger?;
|
|
6
|
-
private client;
|
|
7
|
-
private queueUrl;
|
|
6
|
+
private readonly client;
|
|
7
|
+
private readonly queueUrl;
|
|
8
8
|
constructor(environment: string, logger?: Logger | undefined);
|
|
9
9
|
create(auditLogData: IAuditLogCreationData): Promise<IAuditLogCreationResult>;
|
|
10
10
|
private send;
|