df4031d99c
Sistem web pentru rezervarea de birouri și săli de ședință cu flux de aprobare administrativă. Stack: FastAPI + Vue.js 3 + SQLite + TypeScript Features implementate: - Autentificare JWT + Self-registration cu email verification - CRUD Spații, Utilizatori, Settings (Admin) - Calendar interactiv (FullCalendar) cu drag-and-drop - Creare rezervări cu validare (durată, program, overlap, max/zi) - Rezervări recurente (săptămânal) - Admin: aprobare/respingere/anulare cereri - Admin: creare directă rezervări (bypass approval) - Admin: editare orice rezervare - User: editare/anulare rezervări proprii - Notificări in-app (bell icon + dropdown) - Notificări email (async SMTP cu BackgroundTasks) - Jurnal acțiuni administrative (audit log) - Rapoarte avansate (utilizare, top users, approval rate) - Șabloane rezervări (booking templates) - Atașamente fișiere (upload/download) - Conflict warnings (verificare disponibilitate real-time) - Integrare Google Calendar (OAuth2) - Suport timezone (UTC storage + user preference) - 225+ teste backend Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
60 lines
1.9 KiB
Python
60 lines
1.9 KiB
Python
"""Audit log API endpoints."""
|
|
from datetime import datetime
|
|
from typing import Annotated, Optional
|
|
|
|
from fastapi import APIRouter, Depends, Query
|
|
from sqlalchemy.orm import Session, joinedload
|
|
|
|
from app.core.deps import get_current_admin, get_db
|
|
from app.models.audit_log import AuditLog
|
|
from app.models.user import User
|
|
from app.schemas.audit_log import AuditLogRead
|
|
|
|
router = APIRouter()
|
|
|
|
|
|
@router.get("/admin/audit-log", response_model=list[AuditLogRead])
|
|
def get_audit_logs(
|
|
action: Annotated[Optional[str], Query()] = None,
|
|
start_date: Annotated[Optional[datetime], Query()] = None,
|
|
end_date: Annotated[Optional[datetime], Query()] = None,
|
|
page: Annotated[int, Query(ge=1)] = 1,
|
|
limit: Annotated[int, Query(ge=1, le=100)] = 50,
|
|
db: Session = Depends(get_db),
|
|
current_admin: User = Depends(get_current_admin),
|
|
) -> list[AuditLogRead]:
|
|
"""
|
|
Get audit logs with filtering and pagination.
|
|
|
|
Admin only endpoint to view audit trail of administrative actions.
|
|
"""
|
|
query = db.query(AuditLog).options(joinedload(AuditLog.user))
|
|
|
|
# Apply filters
|
|
if action:
|
|
query = query.filter(AuditLog.action == action)
|
|
if start_date:
|
|
query = query.filter(AuditLog.created_at >= start_date)
|
|
if end_date:
|
|
query = query.filter(AuditLog.created_at <= end_date)
|
|
|
|
# Pagination
|
|
offset = (page - 1) * limit
|
|
logs = query.order_by(AuditLog.created_at.desc()).offset(offset).limit(limit).all()
|
|
|
|
# Map to response schema with user details
|
|
return [
|
|
AuditLogRead(
|
|
id=log.id,
|
|
action=log.action,
|
|
user_id=log.user_id,
|
|
user_name=log.user.full_name,
|
|
user_email=log.user.email,
|
|
target_type=log.target_type,
|
|
target_id=log.target_id,
|
|
details=log.details,
|
|
created_at=log.created_at,
|
|
)
|
|
for log in logs
|
|
]
|