@strapi/admin 5.52.2 → 5.53.0

package/dist/ee/server/src/audit-logs/utils.d.ts

@@ -0,0 +1,10 @@
+interface AdminUserLike {
+    username?: string | null;
+    firstname?: string | null;
+    lastname?: string | null;
+    email: string;
+}
+/** How an admin user is named across audit logs */
+declare const getDisplayName: (user: AdminUserLike) => string;
+export { getDisplayName };
+//# sourceMappingURL=utils.d.ts.map

package/dist/ee/server/src/audit-logs/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../../ee/server/src/audit-logs/utils.ts"],"names":[],"mappings":"AAAA,UAAU,aAAa;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,mDAAmD;AACnD,QAAA,MAAM,cAAc,GAAI,MAAM,aAAa,KAAG,MAU7C,CAAC;AAEF,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/ee/server/src/audit-logs/validation/audit-logs.d.ts

@@ -1,8 +1,10 @@
 export declare const validateFindMany: (body: unknown, errorMessage?: string) => Promise<any>;
 export declare const validateFindManyUsers: (body: unknown, errorMessage?: string) => Promise<any>;
+export declare const validateExport: (body: unknown, errorMessage?: string) => Promise<any>;
 declare const _default: {
     validateFindMany: (body: unknown, errorMessage?: string) => Promise<any>;
     validateFindManyUsers: (body: unknown, errorMessage?: string) => Promise<any>;
+    validateExport: (body: unknown, errorMessage?: string) => Promise<any>;
 };
 export default _default;
 //# sourceMappingURL=audit-logs.d.ts.map

package/dist/ee/server/src/audit-logs/validation/audit-logs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-logs.d.ts","sourceRoot":"","sources":["../../../../../../ee/server/src/audit-logs/validation/audit-logs.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,gBAAgB,wDAA+D,CAAC;AAC7F,eAAO,MAAM,qBAAqB,wDAEhC,CAAC;;;;;AAEH,wBAGE"}
+{"version":3,"file":"audit-logs.d.ts","sourceRoot":"","sources":["../../../../../../ee/server/src/audit-logs/validation/audit-logs.ts"],"names":[],"mappings":"AAiCA,eAAO,MAAM,gBAAgB,wDAA+D,CAAC;AAC7F,eAAO,MAAM,qBAAqB,wDAEhC,CAAC;AACH,eAAO,MAAM,cAAc,wDAA6D,CAAC;;;;;;AAEzF,wBAIE"}

package/dist/ee/server/src/config/admin-actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin-actions.d.ts","sourceRoot":"","sources":["../../../../../ee/server/src/config/admin-actions.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,wBA6BE"}
+{"version":3,"file":"admin-actions.d.ts","sourceRoot":"","sources":["../../../../../ee/server/src/config/admin-actions.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,wBAqCE"}

package/dist/ee/server/src/index.d.ts

@@ -5,6 +5,7 @@ declare const getAdminEE: () => {
             findMany(ctx: import("koa").Context): Promise<void>;
             findManyUsers(ctx: import("koa").Context): Promise<void>;
             findOne(ctx: import("koa").Context): Promise<void>;
+            export(ctx: import("koa").Context): Promise<void>;
         } | undefined;
         authentication: {
             getProviders(ctx: import("koa").Context): Promise<void>;

package/dist/ee/server/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../ee/server/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAc1C,QAAA,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA4Be;QAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;KAAE;wBAcxB;QAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOpD,CAAC;AAEF,eAAe,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../ee/server/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAe1C,QAAA,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA4Be;QAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;KAAE;wBAsBxB;QAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOpD,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/server/ee/server/src/audit-logs/controllers/audit-logs.js

@@ -1,7 +1,12 @@
 'use strict';
 
+var zlib = require('zlib');
+var utils = require('@strapi/utils');
+var auditLogExport = require('../../../../../shared/utils/audit-log-export.js');
 var auditLogs = require('../validation/audit-logs.js');
 
+const EXPORT_INVALID_CONTINUATION_MESSAGE = 'The export continuation is invalid or has expired. Restart the export.';
+const EXPORT_TOO_LARGE_MESSAGE = 'The export matches more entries than the configured limit. Add filters to reduce it.';
 var auditLogsController = {
     async findMany (ctx) {
         const { query } = ctx.request;
@@ -26,6 +31,51 @@ var auditLogsController = {
         const body = await auditLogs.findOne(id);
         ctx.body = body;
         strapi.telemetry.send('didWatchAnAuditLog');
+    },
+    async export (ctx) {
+        const { query } = ctx.request;
+        const validatedQuery = await auditLogs.validateExport(query);
+        const auditLogs$1 = strapi.get('audit-logs');
+        const isContinuation = validatedQuery.cursor !== undefined;
+        if (isContinuation && !auditLogs$1.isTrustedContinuation(validatedQuery)) {
+            throw new utils.errors.ValidationError(EXPORT_INVALID_CONTINUATION_MESSAGE);
+        }
+        if (!isContinuation) {
+            if (await auditLogs$1.isExportTooLarge({
+                filters: validatedQuery.filters ?? null
+            })) {
+                throw new utils.errors.PayloadTooLargeError(EXPORT_TOO_LARGE_MESSAGE);
+            }
+        }
+        const { stream, nextCursor, until, isNewExport, partSize, exportToken } = await auditLogs$1.createExportStream(validatedQuery);
+        const date = new Date().toISOString().slice(0, 10);
+        ctx.set('Content-Type', 'text/csv; charset=utf-8');
+        ctx.set('Content-Disposition', `attachment; filename="audit-logs-${date}.csv"`);
+        ctx.set(auditLogExport.AUDIT_LOGS_EXPORT_UNTIL_HEADER, String(until));
+        ctx.set(auditLogExport.AUDIT_LOGS_EXPORT_PART_SIZE_HEADER, String(partSize));
+        ctx.set(auditLogExport.AUDIT_LOGS_EXPORT_TOKEN_HEADER, exportToken);
+        ctx.set(auditLogExport.AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER, nextCursor !== null ? String(nextCursor) : auditLogExport.AUDIT_LOGS_EXPORT_CURSOR_DONE);
+        const exposedHeaders = [
+            ctx.response.get('Access-Control-Expose-Headers'),
+            auditLogExport.AUDIT_LOGS_EXPORT_UNTIL_HEADER,
+            auditLogExport.AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER,
+            auditLogExport.AUDIT_LOGS_EXPORT_PART_SIZE_HEADER,
+            auditLogExport.AUDIT_LOGS_EXPORT_TOKEN_HEADER,
+            'Content-Disposition'
+        ].filter(Boolean).join(', ');
+        ctx.set('Access-Control-Expose-Headers', exposedHeaders);
+        ctx.vary('Accept-Encoding');
+        if (ctx.acceptsEncodings('gzip', 'identity') === 'gzip') {
+            ctx.set('Content-Encoding', 'gzip');
+            const gzip = zlib.createGzip();
+            stream.on('error', (error)=>gzip.destroy(error));
+            ctx.body = stream.pipe(gzip);
+        } else {
+            ctx.body = stream;
+        }
+        if (isNewExport) {
+            strapi.telemetry.send('didExportAuditLogs');
+        }
     }
 };
 

package/dist/server/ee/server/src/audit-logs/controllers/audit-logs.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-logs.js","sources":["../../../../../../../ee/server/src/audit-logs/controllers/audit-logs.ts"],"sourcesContent":["import type { Context } from 'koa';\n\nimport { validateFindMany, validateFindManyUsers } from '../validation/audit-logs';\n\nexport default {\n  async findMany(ctx: Context) {\n    const { query } = ctx.request;\n    await validateFindMany(query);\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findMany(query);\n\n    ctx.body = body;\n  },\n\n  async findManyUsers(ctx: Context) {\n    const { query } = ctx.request;\n    const { page, pageSize } = await validateFindManyUsers(query);\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findManyUsers({ page, pageSize });\n\n    ctx.body = body;\n  },\n\n  async findOne(ctx: Context) {\n    const { id } = ctx.params;\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findOne(id);\n\n    ctx.body = body;\n\n    strapi.telemetry.send('didWatchAnAuditLog');\n  },\n};\n"],"names":["findMany","ctx","query","request","validateFindMany","auditLogs","strapi","get","body","findManyUsers","page","pageSize","validateFindManyUsers","findOne","id","params","telemetry","send"],"mappings":";;;;AAIA,0BAAe;AACb,IAAA,MAAMA,UAASC,GAAY,EAAA;AACzB,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;AAC7B,QAAA,MAAMC,0BAAAA,CAAiBF,KAAAA,CAAAA;QAEvB,MAAMG,WAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,WAAAA,CAAUL,QAAQ,CAACE,KAAAA,CAAAA;AAEtCD,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;AACb,IAAA,CAAA;AAEA,IAAA,MAAMC,eAAcR,GAAY,EAAA;AAC9B,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;AAC7B,QAAA,MAAM,EAAEO,IAAI,EAAEC,QAAQ,EAAE,GAAG,MAAMC,+BAAAA,CAAsBV,KAAAA,CAAAA;QAEvD,MAAMG,WAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,WAAAA,CAAUI,aAAa,CAAC;AAAEC,YAAAA,IAAAA;AAAMC,YAAAA;AAAS,SAAA,CAAA;AAE5DV,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;AACb,IAAA,CAAA;AAEA,IAAA,MAAMK,SAAQZ,GAAY,EAAA;AACxB,QAAA,MAAM,EAAEa,EAAE,EAAE,GAAGb,IAAIc,MAAM;QAEzB,MAAMV,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,SAAAA,CAAUQ,OAAO,CAACC,EAAAA,CAAAA;AAErCb,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;QAEXF,MAAAA,CAAOU,SAAS,CAACC,IAAI,CAAC,oBAAA,CAAA;AACxB,IAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"audit-logs.js","sources":["../../../../../../../ee/server/src/audit-logs/controllers/audit-logs.ts"],"sourcesContent":["import { createGzip } from 'zlib';\n\nimport type { Context } from 'koa';\nimport { errors } from '@strapi/utils';\n\nimport {\n  AUDIT_LOGS_EXPORT_CURSOR_DONE,\n  AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER,\n  AUDIT_LOGS_EXPORT_PART_SIZE_HEADER,\n  AUDIT_LOGS_EXPORT_TOKEN_HEADER,\n  AUDIT_LOGS_EXPORT_UNTIL_HEADER,\n} from '../../../../../shared/utils/audit-log-export';\nimport { validateExport, validateFindMany, validateFindManyUsers } from '../validation/audit-logs';\n\nconst EXPORT_INVALID_CONTINUATION_MESSAGE =\n  'The export continuation is invalid or has expired. Restart the export.';\nconst EXPORT_TOO_LARGE_MESSAGE =\n  'The export matches more entries than the configured limit. Add filters to reduce it.';\n\nexport default {\n  async findMany(ctx: Context) {\n    const { query } = ctx.request;\n    await validateFindMany(query);\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findMany(query);\n\n    ctx.body = body;\n  },\n\n  async findManyUsers(ctx: Context) {\n    const { query } = ctx.request;\n    const { page, pageSize } = await validateFindManyUsers(query);\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findManyUsers({ page, pageSize });\n\n    ctx.body = body;\n  },\n\n  async findOne(ctx: Context) {\n    const { id } = ctx.params;\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findOne(id);\n\n    ctx.body = body;\n\n    strapi.telemetry.send('didWatchAnAuditLog');\n  },\n\n  async export(ctx: Context) {\n    const { query } = ctx.request;\n    const validatedQuery = await validateExport(query);\n\n    const auditLogs = strapi.get('audit-logs');\n\n    const isContinuation = validatedQuery.cursor !== undefined;\n\n    if (isContinuation && !auditLogs.isTrustedContinuation(validatedQuery)) {\n      throw new errors.ValidationError(EXPORT_INVALID_CONTINUATION_MESSAGE);\n    }\n\n    if (!isContinuation) {\n      if (await auditLogs.isExportTooLarge({ filters: validatedQuery.filters ?? null })) {\n        throw new errors.PayloadTooLargeError(EXPORT_TOO_LARGE_MESSAGE);\n      }\n    }\n\n    const { stream, nextCursor, until, isNewExport, partSize, exportToken } =\n      await auditLogs.createExportStream(validatedQuery);\n\n    const date = new Date().toISOString().slice(0, 10);\n\n    ctx.set('Content-Type', 'text/csv; charset=utf-8');\n    ctx.set('Content-Disposition', `attachment; filename=\"audit-logs-${date}.csv\"`);\n    ctx.set(AUDIT_LOGS_EXPORT_UNTIL_HEADER, String(until));\n    ctx.set(AUDIT_LOGS_EXPORT_PART_SIZE_HEADER, String(partSize));\n    ctx.set(AUDIT_LOGS_EXPORT_TOKEN_HEADER, exportToken);\n    ctx.set(\n      AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER,\n      nextCursor !== null ? String(nextCursor) : AUDIT_LOGS_EXPORT_CURSOR_DONE\n    );\n\n    const exposedHeaders = [\n      ctx.response.get('Access-Control-Expose-Headers'),\n      AUDIT_LOGS_EXPORT_UNTIL_HEADER,\n      AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER,\n      AUDIT_LOGS_EXPORT_PART_SIZE_HEADER,\n      AUDIT_LOGS_EXPORT_TOKEN_HEADER,\n      'Content-Disposition',\n    ]\n      .filter(Boolean)\n      .join(', ');\n    ctx.set('Access-Control-Expose-Headers', exposedHeaders);\n\n    ctx.vary('Accept-Encoding');\n    if (ctx.acceptsEncodings('gzip', 'identity') === 'gzip') {\n      ctx.set('Content-Encoding', 'gzip');\n      const gzip = createGzip();\n      stream.on('error', (error: Error) => gzip.destroy(error));\n      ctx.body = stream.pipe(gzip);\n    } else {\n      ctx.body = stream;\n    }\n\n    if (isNewExport) {\n      strapi.telemetry.send('didExportAuditLogs');\n    }\n  },\n};\n"],"names":["EXPORT_INVALID_CONTINUATION_MESSAGE","EXPORT_TOO_LARGE_MESSAGE","findMany","ctx","query","request","validateFindMany","auditLogs","strapi","get","body","findManyUsers","page","pageSize","validateFindManyUsers","findOne","id","params","telemetry","send","export","validatedQuery","validateExport","isContinuation","cursor","undefined","isTrustedContinuation","errors","ValidationError","isExportTooLarge","filters","PayloadTooLargeError","stream","nextCursor","until","isNewExport","partSize","exportToken","createExportStream","date","Date","toISOString","slice","set","AUDIT_LOGS_EXPORT_UNTIL_HEADER","String","AUDIT_LOGS_EXPORT_PART_SIZE_HEADER","AUDIT_LOGS_EXPORT_TOKEN_HEADER","AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER","AUDIT_LOGS_EXPORT_CURSOR_DONE","exposedHeaders","response","filter","Boolean","join","vary","acceptsEncodings","gzip","createGzip","on","error","destroy","pipe"],"mappings":";;;;;;;AAcA,MAAMA,mCAAAA,GACJ,wEAAA;AACF,MAAMC,wBAAAA,GACJ,sFAAA;AAEF,0BAAe;AACb,IAAA,MAAMC,UAASC,GAAY,EAAA;AACzB,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;AAC7B,QAAA,MAAMC,0BAAAA,CAAiBF,KAAAA,CAAAA;QAEvB,MAAMG,WAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,WAAAA,CAAUL,QAAQ,CAACE,KAAAA,CAAAA;AAEtCD,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;AACb,IAAA,CAAA;AAEA,IAAA,MAAMC,eAAcR,GAAY,EAAA;AAC9B,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;AAC7B,QAAA,MAAM,EAAEO,IAAI,EAAEC,QAAQ,EAAE,GAAG,MAAMC,+BAAAA,CAAsBV,KAAAA,CAAAA;QAEvD,MAAMG,WAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,WAAAA,CAAUI,aAAa,CAAC;AAAEC,YAAAA,IAAAA;AAAMC,YAAAA;AAAS,SAAA,CAAA;AAE5DV,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;AACb,IAAA,CAAA;AAEA,IAAA,MAAMK,SAAQZ,GAAY,EAAA;AACxB,QAAA,MAAM,EAAEa,EAAE,EAAE,GAAGb,IAAIc,MAAM;QAEzB,MAAMV,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,SAAAA,CAAUQ,OAAO,CAACC,EAAAA,CAAAA;AAErCb,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;QAEXF,MAAAA,CAAOU,SAAS,CAACC,IAAI,CAAC,oBAAA,CAAA;AACxB,IAAA,CAAA;AAEA,IAAA,MAAMC,QAAOjB,GAAY,EAAA;AACvB,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;QAC7B,MAAMgB,cAAAA,GAAiB,MAAMC,wBAAAA,CAAelB,KAAAA,CAAAA;QAE5C,MAAMG,WAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;QAE7B,MAAMc,cAAAA,GAAiBF,cAAAA,CAAeG,MAAM,KAAKC,SAAAA;AAEjD,QAAA,IAAIF,cAAAA,IAAkB,CAAChB,WAAAA,CAAUmB,qBAAqB,CAACL,cAAAA,CAAAA,EAAiB;YACtE,MAAM,IAAIM,YAAAA,CAAOC,eAAe,CAAC5B,mCAAAA,CAAAA;AACnC,QAAA;AAEA,QAAA,IAAI,CAACuB,cAAAA,EAAgB;YACnB,IAAI,MAAMhB,WAAAA,CAAUsB,gBAAgB,CAAC;gBAAEC,OAAAA,EAAST,cAAAA,CAAeS,OAAO,IAAI;aAAK,CAAA,EAAI;gBACjF,MAAM,IAAIH,YAAAA,CAAOI,oBAAoB,CAAC9B,wBAAAA,CAAAA;AACxC,YAAA;AACF,QAAA;AAEA,QAAA,MAAM,EAAE+B,MAAM,EAAEC,UAAU,EAAEC,KAAK,EAAEC,WAAW,EAAEC,QAAQ,EAAEC,WAAW,EAAE,GACrE,MAAM9B,WAAAA,CAAU+B,kBAAkB,CAACjB,cAAAA,CAAAA;AAErC,QAAA,MAAMkB,OAAO,IAAIC,IAAAA,EAAAA,CAAOC,WAAW,EAAA,CAAGC,KAAK,CAAC,CAAA,EAAG,EAAA,CAAA;QAE/CvC,GAAAA,CAAIwC,GAAG,CAAC,cAAA,EAAgB,yBAAA,CAAA;QACxBxC,GAAAA,CAAIwC,GAAG,CAAC,qBAAA,EAAuB,CAAC,iCAAiC,EAAEJ,IAAAA,CAAK,KAAK,CAAC,CAAA;QAC9EpC,GAAAA,CAAIwC,GAAG,CAACC,6CAAAA,EAAgCC,MAAAA,CAAOX,KAAAA,CAAAA,CAAAA;QAC/C/B,GAAAA,CAAIwC,GAAG,CAACG,iDAAAA,EAAoCD,MAAAA,CAAOT,QAAAA,CAAAA,CAAAA;QACnDjC,GAAAA,CAAIwC,GAAG,CAACI,6CAAAA,EAAgCV,WAAAA,CAAAA;AACxClC,QAAAA,GAAAA,CAAIwC,GAAG,CACLK,mDAAAA,EACAf,UAAAA,KAAe,IAAA,GAAOY,OAAOZ,UAAAA,CAAAA,GAAcgB,4CAAAA,CAAAA;AAG7C,QAAA,MAAMC,cAAAA,GAAiB;YACrB/C,GAAAA,CAAIgD,QAAQ,CAAC1C,GAAG,CAAC,+BAAA,CAAA;AACjBmC,YAAAA,6CAAAA;AACAI,YAAAA,mDAAAA;AACAF,YAAAA,iDAAAA;AACAC,YAAAA,6CAAAA;AACA,YAAA;AACD,SAAA,CACEK,MAAM,CAACC,OAAAA,CAAAA,CACPC,IAAI,CAAC,IAAA,CAAA;QACRnD,GAAAA,CAAIwC,GAAG,CAAC,+BAAA,EAAiCO,cAAAA,CAAAA;AAEzC/C,QAAAA,GAAAA,CAAIoD,IAAI,CAAC,iBAAA,CAAA;AACT,QAAA,IAAIpD,GAAAA,CAAIqD,gBAAgB,CAAC,MAAA,EAAQ,gBAAgB,MAAA,EAAQ;YACvDrD,GAAAA,CAAIwC,GAAG,CAAC,kBAAA,EAAoB,MAAA,CAAA;AAC5B,YAAA,MAAMc,IAAAA,GAAOC,eAAAA,EAAAA;AACb1B,YAAAA,MAAAA,CAAO2B,EAAE,CAAC,OAAA,EAAS,CAACC,KAAAA,GAAiBH,IAAAA,CAAKI,OAAO,CAACD,KAAAA,CAAAA,CAAAA;AAClDzD,YAAAA,GAAAA,CAAIO,IAAI,GAAGsB,MAAAA,CAAO8B,IAAI,CAACL,IAAAA,CAAAA;QACzB,CAAA,MAAO;AACLtD,YAAAA,GAAAA,CAAIO,IAAI,GAAGsB,MAAAA;AACb,QAAA;AAEA,QAAA,IAAIG,WAAAA,EAAa;YACf3B,MAAAA,CAAOU,SAAS,CAACC,IAAI,CAAC,oBAAA,CAAA;AACxB,QAAA;AACF,IAAA;AACF,CAAA;;;;"}

package/dist/server/ee/server/src/audit-logs/controllers/audit-logs.mjs

@@ -1,5 +1,10 @@
-import { validateFindManyUsers, validateFindMany } from '../validation/audit-logs.mjs';
+import { createGzip } from 'zlib';
+import { errors } from '@strapi/utils';
+import { AUDIT_LOGS_EXPORT_UNTIL_HEADER, AUDIT_LOGS_EXPORT_PART_SIZE_HEADER, AUDIT_LOGS_EXPORT_TOKEN_HEADER, AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER, AUDIT_LOGS_EXPORT_CURSOR_DONE } from '../../../../../shared/utils/audit-log-export.mjs';
+import { validateExport, validateFindManyUsers, validateFindMany } from '../validation/audit-logs.mjs';
 
+const EXPORT_INVALID_CONTINUATION_MESSAGE = 'The export continuation is invalid or has expired. Restart the export.';
+const EXPORT_TOO_LARGE_MESSAGE = 'The export matches more entries than the configured limit. Add filters to reduce it.';
 var auditLogsController = {
     async findMany (ctx) {
         const { query } = ctx.request;
@@ -24,6 +29,51 @@ var auditLogsController = {
         const body = await auditLogs.findOne(id);
         ctx.body = body;
         strapi.telemetry.send('didWatchAnAuditLog');
+    },
+    async export (ctx) {
+        const { query } = ctx.request;
+        const validatedQuery = await validateExport(query);
+        const auditLogs = strapi.get('audit-logs');
+        const isContinuation = validatedQuery.cursor !== undefined;
+        if (isContinuation && !auditLogs.isTrustedContinuation(validatedQuery)) {
+            throw new errors.ValidationError(EXPORT_INVALID_CONTINUATION_MESSAGE);
+        }
+        if (!isContinuation) {
+            if (await auditLogs.isExportTooLarge({
+                filters: validatedQuery.filters ?? null
+            })) {
+                throw new errors.PayloadTooLargeError(EXPORT_TOO_LARGE_MESSAGE);
+            }
+        }
+        const { stream, nextCursor, until, isNewExport, partSize, exportToken } = await auditLogs.createExportStream(validatedQuery);
+        const date = new Date().toISOString().slice(0, 10);
+        ctx.set('Content-Type', 'text/csv; charset=utf-8');
+        ctx.set('Content-Disposition', `attachment; filename="audit-logs-${date}.csv"`);
+        ctx.set(AUDIT_LOGS_EXPORT_UNTIL_HEADER, String(until));
+        ctx.set(AUDIT_LOGS_EXPORT_PART_SIZE_HEADER, String(partSize));
+        ctx.set(AUDIT_LOGS_EXPORT_TOKEN_HEADER, exportToken);
+        ctx.set(AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER, nextCursor !== null ? String(nextCursor) : AUDIT_LOGS_EXPORT_CURSOR_DONE);
+        const exposedHeaders = [
+            ctx.response.get('Access-Control-Expose-Headers'),
+            AUDIT_LOGS_EXPORT_UNTIL_HEADER,
+            AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER,
+            AUDIT_LOGS_EXPORT_PART_SIZE_HEADER,
+            AUDIT_LOGS_EXPORT_TOKEN_HEADER,
+            'Content-Disposition'
+        ].filter(Boolean).join(', ');
+        ctx.set('Access-Control-Expose-Headers', exposedHeaders);
+        ctx.vary('Accept-Encoding');
+        if (ctx.acceptsEncodings('gzip', 'identity') === 'gzip') {
+            ctx.set('Content-Encoding', 'gzip');
+            const gzip = createGzip();
+            stream.on('error', (error)=>gzip.destroy(error));
+            ctx.body = stream.pipe(gzip);
+        } else {
+            ctx.body = stream;
+        }
+        if (isNewExport) {
+            strapi.telemetry.send('didExportAuditLogs');
+        }
     }
 };
 

package/dist/server/ee/server/src/audit-logs/controllers/audit-logs.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"audit-logs.mjs","sources":["../../../../../../../ee/server/src/audit-logs/controllers/audit-logs.ts"],"sourcesContent":["import type { Context } from 'koa';\n\nimport { validateFindMany, validateFindManyUsers } from '../validation/audit-logs';\n\nexport default {\n  async findMany(ctx: Context) {\n    const { query } = ctx.request;\n    await validateFindMany(query);\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findMany(query);\n\n    ctx.body = body;\n  },\n\n  async findManyUsers(ctx: Context) {\n    const { query } = ctx.request;\n    const { page, pageSize } = await validateFindManyUsers(query);\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findManyUsers({ page, pageSize });\n\n    ctx.body = body;\n  },\n\n  async findOne(ctx: Context) {\n    const { id } = ctx.params;\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findOne(id);\n\n    ctx.body = body;\n\n    strapi.telemetry.send('didWatchAnAuditLog');\n  },\n};\n"],"names":["findMany","ctx","query","request","validateFindMany","auditLogs","strapi","get","body","findManyUsers","page","pageSize","validateFindManyUsers","findOne","id","params","telemetry","send"],"mappings":";;AAIA,0BAAe;AACb,IAAA,MAAMA,UAASC,GAAY,EAAA;AACzB,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;AAC7B,QAAA,MAAMC,gBAAAA,CAAiBF,KAAAA,CAAAA;QAEvB,MAAMG,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,SAAAA,CAAUL,QAAQ,CAACE,KAAAA,CAAAA;AAEtCD,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;AACb,IAAA,CAAA;AAEA,IAAA,MAAMC,eAAcR,GAAY,EAAA;AAC9B,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;AAC7B,QAAA,MAAM,EAAEO,IAAI,EAAEC,QAAQ,EAAE,GAAG,MAAMC,qBAAAA,CAAsBV,KAAAA,CAAAA;QAEvD,MAAMG,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,SAAAA,CAAUI,aAAa,CAAC;AAAEC,YAAAA,IAAAA;AAAMC,YAAAA;AAAS,SAAA,CAAA;AAE5DV,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;AACb,IAAA,CAAA;AAEA,IAAA,MAAMK,SAAQZ,GAAY,EAAA;AACxB,QAAA,MAAM,EAAEa,EAAE,EAAE,GAAGb,IAAIc,MAAM;QAEzB,MAAMV,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,SAAAA,CAAUQ,OAAO,CAACC,EAAAA,CAAAA;AAErCb,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;QAEXF,MAAAA,CAAOU,SAAS,CAACC,IAAI,CAAC,oBAAA,CAAA;AACxB,IAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"audit-logs.mjs","sources":["../../../../../../../ee/server/src/audit-logs/controllers/audit-logs.ts"],"sourcesContent":["import { createGzip } from 'zlib';\n\nimport type { Context } from 'koa';\nimport { errors } from '@strapi/utils';\n\nimport {\n  AUDIT_LOGS_EXPORT_CURSOR_DONE,\n  AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER,\n  AUDIT_LOGS_EXPORT_PART_SIZE_HEADER,\n  AUDIT_LOGS_EXPORT_TOKEN_HEADER,\n  AUDIT_LOGS_EXPORT_UNTIL_HEADER,\n} from '../../../../../shared/utils/audit-log-export';\nimport { validateExport, validateFindMany, validateFindManyUsers } from '../validation/audit-logs';\n\nconst EXPORT_INVALID_CONTINUATION_MESSAGE =\n  'The export continuation is invalid or has expired. Restart the export.';\nconst EXPORT_TOO_LARGE_MESSAGE =\n  'The export matches more entries than the configured limit. Add filters to reduce it.';\n\nexport default {\n  async findMany(ctx: Context) {\n    const { query } = ctx.request;\n    await validateFindMany(query);\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findMany(query);\n\n    ctx.body = body;\n  },\n\n  async findManyUsers(ctx: Context) {\n    const { query } = ctx.request;\n    const { page, pageSize } = await validateFindManyUsers(query);\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findManyUsers({ page, pageSize });\n\n    ctx.body = body;\n  },\n\n  async findOne(ctx: Context) {\n    const { id } = ctx.params;\n\n    const auditLogs = strapi.get('audit-logs');\n    const body = await auditLogs.findOne(id);\n\n    ctx.body = body;\n\n    strapi.telemetry.send('didWatchAnAuditLog');\n  },\n\n  async export(ctx: Context) {\n    const { query } = ctx.request;\n    const validatedQuery = await validateExport(query);\n\n    const auditLogs = strapi.get('audit-logs');\n\n    const isContinuation = validatedQuery.cursor !== undefined;\n\n    if (isContinuation && !auditLogs.isTrustedContinuation(validatedQuery)) {\n      throw new errors.ValidationError(EXPORT_INVALID_CONTINUATION_MESSAGE);\n    }\n\n    if (!isContinuation) {\n      if (await auditLogs.isExportTooLarge({ filters: validatedQuery.filters ?? null })) {\n        throw new errors.PayloadTooLargeError(EXPORT_TOO_LARGE_MESSAGE);\n      }\n    }\n\n    const { stream, nextCursor, until, isNewExport, partSize, exportToken } =\n      await auditLogs.createExportStream(validatedQuery);\n\n    const date = new Date().toISOString().slice(0, 10);\n\n    ctx.set('Content-Type', 'text/csv; charset=utf-8');\n    ctx.set('Content-Disposition', `attachment; filename=\"audit-logs-${date}.csv\"`);\n    ctx.set(AUDIT_LOGS_EXPORT_UNTIL_HEADER, String(until));\n    ctx.set(AUDIT_LOGS_EXPORT_PART_SIZE_HEADER, String(partSize));\n    ctx.set(AUDIT_LOGS_EXPORT_TOKEN_HEADER, exportToken);\n    ctx.set(\n      AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER,\n      nextCursor !== null ? String(nextCursor) : AUDIT_LOGS_EXPORT_CURSOR_DONE\n    );\n\n    const exposedHeaders = [\n      ctx.response.get('Access-Control-Expose-Headers'),\n      AUDIT_LOGS_EXPORT_UNTIL_HEADER,\n      AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER,\n      AUDIT_LOGS_EXPORT_PART_SIZE_HEADER,\n      AUDIT_LOGS_EXPORT_TOKEN_HEADER,\n      'Content-Disposition',\n    ]\n      .filter(Boolean)\n      .join(', ');\n    ctx.set('Access-Control-Expose-Headers', exposedHeaders);\n\n    ctx.vary('Accept-Encoding');\n    if (ctx.acceptsEncodings('gzip', 'identity') === 'gzip') {\n      ctx.set('Content-Encoding', 'gzip');\n      const gzip = createGzip();\n      stream.on('error', (error: Error) => gzip.destroy(error));\n      ctx.body = stream.pipe(gzip);\n    } else {\n      ctx.body = stream;\n    }\n\n    if (isNewExport) {\n      strapi.telemetry.send('didExportAuditLogs');\n    }\n  },\n};\n"],"names":["EXPORT_INVALID_CONTINUATION_MESSAGE","EXPORT_TOO_LARGE_MESSAGE","findMany","ctx","query","request","validateFindMany","auditLogs","strapi","get","body","findManyUsers","page","pageSize","validateFindManyUsers","findOne","id","params","telemetry","send","export","validatedQuery","validateExport","isContinuation","cursor","undefined","isTrustedContinuation","errors","ValidationError","isExportTooLarge","filters","PayloadTooLargeError","stream","nextCursor","until","isNewExport","partSize","exportToken","createExportStream","date","Date","toISOString","slice","set","AUDIT_LOGS_EXPORT_UNTIL_HEADER","String","AUDIT_LOGS_EXPORT_PART_SIZE_HEADER","AUDIT_LOGS_EXPORT_TOKEN_HEADER","AUDIT_LOGS_EXPORT_NEXT_CURSOR_HEADER","AUDIT_LOGS_EXPORT_CURSOR_DONE","exposedHeaders","response","filter","Boolean","join","vary","acceptsEncodings","gzip","createGzip","on","error","destroy","pipe"],"mappings":";;;;;AAcA,MAAMA,mCAAAA,GACJ,wEAAA;AACF,MAAMC,wBAAAA,GACJ,sFAAA;AAEF,0BAAe;AACb,IAAA,MAAMC,UAASC,GAAY,EAAA;AACzB,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;AAC7B,QAAA,MAAMC,gBAAAA,CAAiBF,KAAAA,CAAAA;QAEvB,MAAMG,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,SAAAA,CAAUL,QAAQ,CAACE,KAAAA,CAAAA;AAEtCD,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;AACb,IAAA,CAAA;AAEA,IAAA,MAAMC,eAAcR,GAAY,EAAA;AAC9B,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;AAC7B,QAAA,MAAM,EAAEO,IAAI,EAAEC,QAAQ,EAAE,GAAG,MAAMC,qBAAAA,CAAsBV,KAAAA,CAAAA;QAEvD,MAAMG,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,SAAAA,CAAUI,aAAa,CAAC;AAAEC,YAAAA,IAAAA;AAAMC,YAAAA;AAAS,SAAA,CAAA;AAE5DV,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;AACb,IAAA,CAAA;AAEA,IAAA,MAAMK,SAAQZ,GAAY,EAAA;AACxB,QAAA,MAAM,EAAEa,EAAE,EAAE,GAAGb,IAAIc,MAAM;QAEzB,MAAMV,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;AAC7B,QAAA,MAAMC,IAAAA,GAAO,MAAMH,SAAAA,CAAUQ,OAAO,CAACC,EAAAA,CAAAA;AAErCb,QAAAA,GAAAA,CAAIO,IAAI,GAAGA,IAAAA;QAEXF,MAAAA,CAAOU,SAAS,CAACC,IAAI,CAAC,oBAAA,CAAA;AACxB,IAAA,CAAA;AAEA,IAAA,MAAMC,QAAOjB,GAAY,EAAA;AACvB,QAAA,MAAM,EAAEC,KAAK,EAAE,GAAGD,IAAIE,OAAO;QAC7B,MAAMgB,cAAAA,GAAiB,MAAMC,cAAAA,CAAelB,KAAAA,CAAAA;QAE5C,MAAMG,SAAAA,GAAYC,MAAAA,CAAOC,GAAG,CAAC,YAAA,CAAA;QAE7B,MAAMc,cAAAA,GAAiBF,cAAAA,CAAeG,MAAM,KAAKC,SAAAA;AAEjD,QAAA,IAAIF,cAAAA,IAAkB,CAAChB,SAAAA,CAAUmB,qBAAqB,CAACL,cAAAA,CAAAA,EAAiB;YACtE,MAAM,IAAIM,MAAAA,CAAOC,eAAe,CAAC5B,mCAAAA,CAAAA;AACnC,QAAA;AAEA,QAAA,IAAI,CAACuB,cAAAA,EAAgB;YACnB,IAAI,MAAMhB,SAAAA,CAAUsB,gBAAgB,CAAC;gBAAEC,OAAAA,EAAST,cAAAA,CAAeS,OAAO,IAAI;aAAK,CAAA,EAAI;gBACjF,MAAM,IAAIH,MAAAA,CAAOI,oBAAoB,CAAC9B,wBAAAA,CAAAA;AACxC,YAAA;AACF,QAAA;AAEA,QAAA,MAAM,EAAE+B,MAAM,EAAEC,UAAU,EAAEC,KAAK,EAAEC,WAAW,EAAEC,QAAQ,EAAEC,WAAW,EAAE,GACrE,MAAM9B,SAAAA,CAAU+B,kBAAkB,CAACjB,cAAAA,CAAAA;AAErC,QAAA,MAAMkB,OAAO,IAAIC,IAAAA,EAAAA,CAAOC,WAAW,EAAA,CAAGC,KAAK,CAAC,CAAA,EAAG,EAAA,CAAA;QAE/CvC,GAAAA,CAAIwC,GAAG,CAAC,cAAA,EAAgB,yBAAA,CAAA;QACxBxC,GAAAA,CAAIwC,GAAG,CAAC,qBAAA,EAAuB,CAAC,iCAAiC,EAAEJ,IAAAA,CAAK,KAAK,CAAC,CAAA;QAC9EpC,GAAAA,CAAIwC,GAAG,CAACC,8BAAAA,EAAgCC,MAAAA,CAAOX,KAAAA,CAAAA,CAAAA;QAC/C/B,GAAAA,CAAIwC,GAAG,CAACG,kCAAAA,EAAoCD,MAAAA,CAAOT,QAAAA,CAAAA,CAAAA;QACnDjC,GAAAA,CAAIwC,GAAG,CAACI,8BAAAA,EAAgCV,WAAAA,CAAAA;AACxClC,QAAAA,GAAAA,CAAIwC,GAAG,CACLK,oCAAAA,EACAf,UAAAA,KAAe,IAAA,GAAOY,OAAOZ,UAAAA,CAAAA,GAAcgB,6BAAAA,CAAAA;AAG7C,QAAA,MAAMC,cAAAA,GAAiB;YACrB/C,GAAAA,CAAIgD,QAAQ,CAAC1C,GAAG,CAAC,+BAAA,CAAA;AACjBmC,YAAAA,8BAAAA;AACAI,YAAAA,oCAAAA;AACAF,YAAAA,kCAAAA;AACAC,YAAAA,8BAAAA;AACA,YAAA;AACD,SAAA,CACEK,MAAM,CAACC,OAAAA,CAAAA,CACPC,IAAI,CAAC,IAAA,CAAA;QACRnD,GAAAA,CAAIwC,GAAG,CAAC,+BAAA,EAAiCO,cAAAA,CAAAA;AAEzC/C,QAAAA,GAAAA,CAAIoD,IAAI,CAAC,iBAAA,CAAA;AACT,QAAA,IAAIpD,GAAAA,CAAIqD,gBAAgB,CAAC,MAAA,EAAQ,gBAAgB,MAAA,EAAQ;YACvDrD,GAAAA,CAAIwC,GAAG,CAAC,kBAAA,EAAoB,MAAA,CAAA;AAC5B,YAAA,MAAMc,IAAAA,GAAOC,UAAAA,EAAAA;AACb1B,YAAAA,MAAAA,CAAO2B,EAAE,CAAC,OAAA,EAAS,CAACC,KAAAA,GAAiBH,IAAAA,CAAKI,OAAO,CAACD,KAAAA,CAAAA,CAAAA;AAClDzD,YAAAA,GAAAA,CAAIO,IAAI,GAAGsB,MAAAA,CAAO8B,IAAI,CAACL,IAAAA,CAAAA;QACzB,CAAA,MAAO;AACLtD,YAAAA,GAAAA,CAAIO,IAAI,GAAGsB,MAAAA;AACb,QAAA;AAEA,QAAA,IAAIG,WAAAA,EAAa;YACf3B,MAAAA,CAAOU,SAAS,CAACC,IAAI,CAAC,oBAAA,CAAA;AACxB,QAAA;AACF,IAAA;AACF,CAAA;;;;"}

package/dist/server/ee/server/src/audit-logs/routes/audit-logs.js

@@ -2,7 +2,9 @@
 
 var utils = require('../../routes/utils.js');
 
-const getRouteConfig = ()=>({
+const getRouteConfig = (actions = [
+    'admin::audit-logs.read'
+])=>({
         middlewares: [
             utils.enableFeatureMiddleware('audit-logs')
         ],
@@ -11,9 +13,7 @@ const getRouteConfig = ()=>({
             {
                 name: 'admin::hasPermissions',
                 config: {
-                    actions: [
-                        'admin::audit-logs.read'
-                    ]
+                    actions
                 }
             }
         ]
@@ -33,6 +33,15 @@ var auditLogsRoutes = {
             handler: 'audit-logs.findManyUsers',
             config: getRouteConfig()
         },
+        {
+            method: 'GET',
+            path: '/audit-logs/export',
+            handler: 'audit-logs.export',
+            config: getRouteConfig([
+                'admin::audit-logs.read',
+                'admin::audit-logs.export'
+            ])
+        },
         {
             method: 'GET',
             path: '/audit-logs/:id',

package/dist/server/ee/server/src/audit-logs/routes/audit-logs.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-logs.js","sources":["../../../../../../../ee/server/src/audit-logs/routes/audit-logs.ts"],"sourcesContent":["import { enableFeatureMiddleware } from '../../routes/utils';\n\nconst getRouteConfig = () => ({\n  middlewares: [enableFeatureMiddleware('audit-logs')],\n  policies: [\n    'admin::isAuthenticatedAdmin',\n    {\n      name: 'admin::hasPermissions',\n      config: {\n        actions: ['admin::audit-logs.read'],\n      },\n    },\n  ],\n});\n\nexport default {\n  type: 'admin',\n  routes: [\n    {\n      method: 'GET',\n      path: '/audit-logs',\n      handler: 'audit-logs.findMany',\n      config: getRouteConfig(),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/users',\n      handler: 'audit-logs.findManyUsers',\n      config: getRouteConfig(),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/:id',\n      handler: 'audit-logs.findOne',\n      config: getRouteConfig(),\n    },\n  ],\n};\n"],"names":["getRouteConfig","middlewares","enableFeatureMiddleware","policies","name","config","actions","type","routes","method","path","handler"],"mappings":";;;;AAEA,MAAMA,cAAAA,GAAiB,KAAO;QAC5BC,WAAAA,EAAa;YAACC,6BAAAA,CAAwB,YAAA;AAAc,SAAA;QACpDC,QAAAA,EAAU;AACR,YAAA,6BAAA;AACA,YAAA;gBACEC,IAAAA,EAAM,uBAAA;gBACNC,MAAAA,EAAQ;oBACNC,OAAAA,EAAS;AAAC,wBAAA;AAAyB;AACrC;AACF;AACD;KACH,CAAA;AAEA,sBAAe;IACbC,IAAAA,EAAM,OAAA;IACNC,MAAAA,EAAQ;AACN,QAAA;YACEC,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,aAAA;YACNC,OAAAA,EAAS,qBAAA;YACTN,MAAAA,EAAQL,cAAAA;AACV,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,mBAAA;YACNC,OAAAA,EAAS,0BAAA;YACTN,MAAAA,EAAQL,cAAAA;AACV,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,iBAAA;YACNC,OAAAA,EAAS,oBAAA;YACTN,MAAAA,EAAQL,cAAAA;AACV;AACD;AACH,CAAA;;;;"}
+{"version":3,"file":"audit-logs.js","sources":["../../../../../../../ee/server/src/audit-logs/routes/audit-logs.ts"],"sourcesContent":["import { enableFeatureMiddleware } from '../../routes/utils';\n\nconst getRouteConfig = (actions: string[] = ['admin::audit-logs.read']) => ({\n  middlewares: [enableFeatureMiddleware('audit-logs')],\n  policies: [\n    'admin::isAuthenticatedAdmin',\n    {\n      name: 'admin::hasPermissions',\n      config: {\n        actions,\n      },\n    },\n  ],\n});\n\nexport default {\n  type: 'admin',\n  routes: [\n    {\n      method: 'GET',\n      path: '/audit-logs',\n      handler: 'audit-logs.findMany',\n      config: getRouteConfig(),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/users',\n      handler: 'audit-logs.findManyUsers',\n      config: getRouteConfig(),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/export',\n      handler: 'audit-logs.export',\n      config: getRouteConfig(['admin::audit-logs.read', 'admin::audit-logs.export']),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/:id',\n      handler: 'audit-logs.findOne',\n      config: getRouteConfig(),\n    },\n  ],\n};\n"],"names":["getRouteConfig","actions","middlewares","enableFeatureMiddleware","policies","name","config","type","routes","method","path","handler"],"mappings":";;;;AAEA,MAAMA,cAAAA,GAAiB,CAACC,OAAAA,GAAoB;AAAC,IAAA;AAAyB,CAAA,IAAM;QAC1EC,WAAAA,EAAa;YAACC,6BAAAA,CAAwB,YAAA;AAAc,SAAA;QACpDC,QAAAA,EAAU;AACR,YAAA,6BAAA;AACA,YAAA;gBACEC,IAAAA,EAAM,uBAAA;gBACNC,MAAAA,EAAQ;AACNL,oBAAAA;AACF;AACF;AACD;KACH,CAAA;AAEA,sBAAe;IACbM,IAAAA,EAAM,OAAA;IACNC,MAAAA,EAAQ;AACN,QAAA;YACEC,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,aAAA;YACNC,OAAAA,EAAS,qBAAA;YACTL,MAAAA,EAAQN,cAAAA;AACV,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,mBAAA;YACNC,OAAAA,EAAS,0BAAA;YACTL,MAAAA,EAAQN,cAAAA;AACV,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,oBAAA;YACNC,OAAAA,EAAS,mBAAA;AACTL,YAAAA,MAAAA,EAAQN,cAAAA,CAAe;AAAC,gBAAA,wBAAA;AAA0B,gBAAA;AAA2B,aAAA;AAC/E,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,iBAAA;YACNC,OAAAA,EAAS,oBAAA;YACTL,MAAAA,EAAQN,cAAAA;AACV;AACD;AACH,CAAA;;;;"}

package/dist/server/ee/server/src/audit-logs/routes/audit-logs.mjs

@@ -1,6 +1,8 @@
 import { enableFeatureMiddleware } from '../../routes/utils.mjs';
 
-const getRouteConfig = ()=>({
+const getRouteConfig = (actions = [
+    'admin::audit-logs.read'
+])=>({
         middlewares: [
             enableFeatureMiddleware('audit-logs')
         ],
@@ -9,9 +11,7 @@ const getRouteConfig = ()=>({
             {
                 name: 'admin::hasPermissions',
                 config: {
-                    actions: [
-                        'admin::audit-logs.read'
-                    ]
+                    actions
                 }
             }
         ]
@@ -31,6 +31,15 @@ var auditLogsRoutes = {
             handler: 'audit-logs.findManyUsers',
             config: getRouteConfig()
         },
+        {
+            method: 'GET',
+            path: '/audit-logs/export',
+            handler: 'audit-logs.export',
+            config: getRouteConfig([
+                'admin::audit-logs.read',
+                'admin::audit-logs.export'
+            ])
+        },
         {
             method: 'GET',
             path: '/audit-logs/:id',

package/dist/server/ee/server/src/audit-logs/routes/audit-logs.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"audit-logs.mjs","sources":["../../../../../../../ee/server/src/audit-logs/routes/audit-logs.ts"],"sourcesContent":["import { enableFeatureMiddleware } from '../../routes/utils';\n\nconst getRouteConfig = () => ({\n  middlewares: [enableFeatureMiddleware('audit-logs')],\n  policies: [\n    'admin::isAuthenticatedAdmin',\n    {\n      name: 'admin::hasPermissions',\n      config: {\n        actions: ['admin::audit-logs.read'],\n      },\n    },\n  ],\n});\n\nexport default {\n  type: 'admin',\n  routes: [\n    {\n      method: 'GET',\n      path: '/audit-logs',\n      handler: 'audit-logs.findMany',\n      config: getRouteConfig(),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/users',\n      handler: 'audit-logs.findManyUsers',\n      config: getRouteConfig(),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/:id',\n      handler: 'audit-logs.findOne',\n      config: getRouteConfig(),\n    },\n  ],\n};\n"],"names":["getRouteConfig","middlewares","enableFeatureMiddleware","policies","name","config","actions","type","routes","method","path","handler"],"mappings":";;AAEA,MAAMA,cAAAA,GAAiB,KAAO;QAC5BC,WAAAA,EAAa;YAACC,uBAAAA,CAAwB,YAAA;AAAc,SAAA;QACpDC,QAAAA,EAAU;AACR,YAAA,6BAAA;AACA,YAAA;gBACEC,IAAAA,EAAM,uBAAA;gBACNC,MAAAA,EAAQ;oBACNC,OAAAA,EAAS;AAAC,wBAAA;AAAyB;AACrC;AACF;AACD;KACH,CAAA;AAEA,sBAAe;IACbC,IAAAA,EAAM,OAAA;IACNC,MAAAA,EAAQ;AACN,QAAA;YACEC,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,aAAA;YACNC,OAAAA,EAAS,qBAAA;YACTN,MAAAA,EAAQL,cAAAA;AACV,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,mBAAA;YACNC,OAAAA,EAAS,0BAAA;YACTN,MAAAA,EAAQL,cAAAA;AACV,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,iBAAA;YACNC,OAAAA,EAAS,oBAAA;YACTN,MAAAA,EAAQL,cAAAA;AACV;AACD;AACH,CAAA;;;;"}
+{"version":3,"file":"audit-logs.mjs","sources":["../../../../../../../ee/server/src/audit-logs/routes/audit-logs.ts"],"sourcesContent":["import { enableFeatureMiddleware } from '../../routes/utils';\n\nconst getRouteConfig = (actions: string[] = ['admin::audit-logs.read']) => ({\n  middlewares: [enableFeatureMiddleware('audit-logs')],\n  policies: [\n    'admin::isAuthenticatedAdmin',\n    {\n      name: 'admin::hasPermissions',\n      config: {\n        actions,\n      },\n    },\n  ],\n});\n\nexport default {\n  type: 'admin',\n  routes: [\n    {\n      method: 'GET',\n      path: '/audit-logs',\n      handler: 'audit-logs.findMany',\n      config: getRouteConfig(),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/users',\n      handler: 'audit-logs.findManyUsers',\n      config: getRouteConfig(),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/export',\n      handler: 'audit-logs.export',\n      config: getRouteConfig(['admin::audit-logs.read', 'admin::audit-logs.export']),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/:id',\n      handler: 'audit-logs.findOne',\n      config: getRouteConfig(),\n    },\n  ],\n};\n"],"names":["getRouteConfig","actions","middlewares","enableFeatureMiddleware","policies","name","config","type","routes","method","path","handler"],"mappings":";;AAEA,MAAMA,cAAAA,GAAiB,CAACC,OAAAA,GAAoB;AAAC,IAAA;AAAyB,CAAA,IAAM;QAC1EC,WAAAA,EAAa;YAACC,uBAAAA,CAAwB,YAAA;AAAc,SAAA;QACpDC,QAAAA,EAAU;AACR,YAAA,6BAAA;AACA,YAAA;gBACEC,IAAAA,EAAM,uBAAA;gBACNC,MAAAA,EAAQ;AACNL,oBAAAA;AACF;AACF;AACD;KACH,CAAA;AAEA,sBAAe;IACbM,IAAAA,EAAM,OAAA;IACNC,MAAAA,EAAQ;AACN,QAAA;YACEC,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,aAAA;YACNC,OAAAA,EAAS,qBAAA;YACTL,MAAAA,EAAQN,cAAAA;AACV,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,mBAAA;YACNC,OAAAA,EAAS,0BAAA;YACTL,MAAAA,EAAQN,cAAAA;AACV,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,oBAAA;YACNC,OAAAA,EAAS,mBAAA;AACTL,YAAAA,MAAAA,EAAQN,cAAAA,CAAe;AAAC,gBAAA,wBAAA;AAA0B,gBAAA;AAA2B,aAAA;AAC/E,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,iBAAA;YACNC,OAAAA,EAAS,oBAAA;YACTL,MAAAA,EAAQN,cAAAA;AACV;AACD;AACH,CAAA;;;;"}

package/dist/server/ee/server/src/audit-logs/services/audit-logs.js

@@ -1,18 +1,93 @@
 'use strict';
 
+var stream = require('stream');
+var auditLogExport = require('../../../../../shared/utils/audit-log-export.js');
+var utils = require('../utils.js');
+var csv = require('../utils/csv.js');
+var exportToken = require('../utils/export-token.js');
+
+const EXPORT_CSV_COLUMNS = [
+    'id',
+    'action',
+    'date',
+    'user_id',
+    'user_email',
+    'user_display_name',
+    'origin',
+    'payload'
+];
+const EXPORT_USER_COLUMNS = [
+    'id',
+    'email',
+    'username',
+    'firstname',
+    'lastname'
+];
+const EXPORT_BATCH_SIZE = 5000;
 const getSanitizedUser = (user)=>{
-    let displayName = user.email;
-    if (user.username) {
-        displayName = user.username;
-    } else if (user.firstname && user.lastname) {
-        displayName = `${user.firstname} ${user.lastname}`;
-    }
     return {
         id: user.id,
         email: user.email,
-        displayName
+        displayName: utils.getDisplayName(user)
     };
 };
+const serializeCsvPayload = (payload)=>{
+    if (payload === null || payload === undefined) {
+        return null;
+    }
+    return typeof payload === 'string' ? payload : JSON.stringify(payload);
+};
+const parseCsvPayload = (payload)=>{
+    if (typeof payload === 'string') {
+        try {
+            return JSON.parse(payload);
+        } catch  {
+            return null;
+        }
+    }
+    return typeof payload === 'object' ? payload : null;
+};
+const getExportSecret = (strapi)=>{
+    const secret = strapi.config.get('admin.auth.secret');
+    if (typeof secret !== 'string' || secret.length === 0) {
+        throw new Error('The audit logs export requires admin.auth.secret to be set in config/admin.js.');
+    }
+    return secret;
+};
+const isTrustedExportContinuation = (strapi, query)=>{
+    return query.cursor !== undefined && query.until !== undefined && exportToken.verifyExportToken(getExportSecret(strapi), query.token, query.until, query.filters);
+};
+const buildExportWhere = (filtersWhere, untilId, afterId)=>({
+        $and: [
+            filtersWhere ?? {},
+            {
+                id: {
+                    $lte: untilId
+                }
+            },
+            ...afterId > 0 ? [
+                {
+                    id: {
+                        $gt: afterId
+                    }
+                }
+            ] : []
+        ]
+    });
+const toCsvLine = (row)=>{
+    const user = row.user ? getSanitizedUser(row.user) : null;
+    const { payload } = row;
+    return csv.serializeCsvLine([
+        row.id,
+        row.action,
+        row.date instanceof Date ? row.date.toISOString() : row.date,
+        user?.id ?? null,
+        user?.email ?? null,
+        user?.displayName ?? null,
+        parseCsvPayload(payload)?.origin ?? null,
+        serializeCsvPayload(payload)
+    ]);
+};
 /**
  * @description
  * Manages audit logs interaction with the database. Accessible via strapi.get('audit-logs')
@@ -72,6 +147,124 @@ const getSanitizedUser = (user)=>{
                 pagination
             };
         },
+        async isExportTooLarge (query) {
+            const maxRows = strapi.config.get('admin.auditLogs.exportMaxRows', auditLogExport.AUDIT_LOGS_EXPORT_DEFAULT_MAX_ROWS);
+            const { where } = strapi.get('query-params').transform('admin::audit-log', {
+                filters: query.filters ?? undefined
+            });
+            const beyondCap = await strapi.db.query('admin::audit-log').findMany({
+                select: [
+                    'id'
+                ],
+                where: where ?? {},
+                orderBy: {
+                    id: 'asc'
+                },
+                offset: maxRows,
+                limit: 1
+            });
+            return beyondCap.length > 0;
+        },
+        isTrustedContinuation (query) {
+            return isTrustedExportContinuation(strapi, query);
+        },
+        async createExportStream (query) {
+            getExportSecret(strapi);
+            const { cursor, pageSize, until, token, page: _page, sort: _sort, ...filtersQuery } = query;
+            const configuredPartSize = strapi.config.get('admin.auditLogs.exportPartRows', auditLogExport.AUDIT_LOGS_EXPORT_PART_ROWS);
+            const partSize = Math.max(1, Math.min(pageSize ?? configuredPartSize, auditLogExport.AUDIT_LOGS_EXPORT_PART_MAX_ROWS));
+            const { where: filtersWhere } = strapi.get('query-params').transform('admin::audit-log', filtersQuery);
+            const isNewExport = !isTrustedExportContinuation(strapi, query);
+            if (isNewExport) {
+                await strapi.eventHub.emit(auditLogExport.AUDIT_LOG_EXPORT_EVENT, {
+                    filters: filtersQuery.filters ?? null
+                });
+            }
+            let frozenUntil = isNewExport ? undefined : until;
+            if (frozenUntil === undefined) {
+                const [lastRow] = await strapi.db.query('admin::audit-log').findMany({
+                    select: [
+                        'id'
+                    ],
+                    orderBy: {
+                        id: 'desc'
+                    },
+                    limit: 1
+                });
+                frozenUntil = lastRow?.id ?? 0;
+            }
+            const untilId = frozenUntil ?? 0;
+            const getWhere = (afterId)=>buildExportWhere(filtersWhere, untilId, afterId);
+            const boundary = await strapi.db.query('admin::audit-log').findMany({
+                select: [
+                    'id'
+                ],
+                where: getWhere(cursor ?? 0),
+                orderBy: {
+                    id: 'asc'
+                },
+                offset: partSize - 1,
+                limit: 2
+            });
+            const nextCursor = boundary.length > 1 ? boundary[0].id : null;
+            const partUpperBound = nextCursor ?? untilId;
+            async function* csvChunks() {
+                if (isNewExport) {
+                    yield csv.CSV_BOM + csv.serializeCsvLine(EXPORT_CSV_COLUMNS);
+                }
+                let lastId = cursor ?? 0;
+                let remaining = partSize;
+                while(remaining > 0){
+                    const batchLimit = Math.min(EXPORT_BATCH_SIZE, remaining);
+                    const rows = await strapi.db.query('admin::audit-log').findMany({
+                        select: [
+                            'id',
+                            'action',
+                            'date',
+                            'payload'
+                        ],
+                        populate: {
+                            user: {
+                                select: EXPORT_USER_COLUMNS
+                            }
+                        },
+                        where: buildExportWhere(filtersWhere, partUpperBound, lastId),
+                        orderBy: {
+                            id: 'asc'
+                        },
+                        limit: batchLimit
+                    });
+                    if (rows.length === 0) {
+                        break;
+                    }
+                    yield rows.map(toCsvLine).join('');
+                    lastId = rows[rows.length - 1].id;
+                    remaining -= rows.length;
+                    if (rows.length < batchLimit) {
+                        break;
+                    }
+                }
+            }
+            async function* loggedCsvChunks() {
+                try {
+                    yield* csvChunks();
+                } catch (error) {
+                    strapi.log.error(`Audit logs export failed after the response started, the CSV part is truncated: ${error}`);
+                    throw error;
+                }
+            }
+            return {
+                stream: stream.Readable.from(loggedCsvChunks(), {
+                    objectMode: false,
+                    highWaterMark: 64 * 1024
+                }),
+                nextCursor,
+                until: untilId,
+                isNewExport,
+                partSize,
+                exportToken: isNewExport ? exportToken.signExportToken(getExportSecret(strapi), untilId, filtersQuery.filters) : token
+            };
+        },
         async findManyUsers (query) {
             const { page = 1, pageSize = 10 } = query;
             const userAttribute = strapi.db.metadata.get('admin::audit-log').attributes.user;
@@ -140,4 +333,5 @@ const getSanitizedUser = (user)=>{
 };
 
 exports.createAuditLogsService = createAuditLogsService;
+exports.toCsvLine = toCsvLine;
 //# sourceMappingURL=audit-logs.js.map