import { db, requestAuditLog, resources } from "@server/db"; import { registry } from "@server/openApi"; import { NextFunction } from "express"; import { Request, Response } from "express"; import { eq, gt, lt, and, count, sql } from "drizzle-orm"; import { OpenAPITags } from "@server/openApi"; import { z } from "zod"; import createHttpError from "http-errors"; import HttpCode from "@server/types/HttpCode"; import { fromError } from "zod-validation-error"; import response from "@server/lib/response"; import logger from "@server/logger"; const queryAccessAuditLogsQuery = z.object({ // iso string just validate its a parseable date timeStart: z .string() .refine((val) => !isNaN(Date.parse(val)), { error: "timeStart must be a valid ISO date string" }) .transform((val) => Math.floor(new Date(val).getTime() / 1000)) .optional(), timeEnd: z .string() .refine((val) => !isNaN(Date.parse(val)), { error: "timeEnd must be a valid ISO date string" }) .transform((val) => Math.floor(new Date(val).getTime() / 1000)) .optional() .prefault(new Date().toISOString()) .openapi({ type: "string", format: "date-time", description: "End time as ISO date string (defaults to current time)" }), resourceId: z .string() .optional() .transform(Number) .pipe(z.int().positive()) .optional() }); const queryRequestAuditLogsParams = z.object({ orgId: z.string() }); const queryRequestAuditLogsCombined = queryAccessAuditLogsQuery.merge( queryRequestAuditLogsParams ); type Q = z.infer; async function query(query: Q) { let baseConditions = and( eq(requestAuditLog.orgId, query.orgId), lt(requestAuditLog.timestamp, query.timeEnd) ); if (query.timeStart) { baseConditions = and( baseConditions, gt(requestAuditLog.timestamp, query.timeStart) ); } if (query.resourceId) { baseConditions = and( baseConditions, eq(requestAuditLog.resourceId, query.resourceId) ); } const [totalRequests] = await db .select({ total: count() }) .from(requestAuditLog) .where(baseConditions); const [totalBlocked] = await db .select({ blocked: count() }) .from(requestAuditLog) .where(and(baseConditions, eq(requestAuditLog.action, false))); const requestsPerCountry = await db .select({ country_code: requestAuditLog.location, total: sql`count(${requestAuditLog.id})` .mapWith(Number) .as("total") }) .from(requestAuditLog) .where(baseConditions) .groupBy(requestAuditLog.location); return { requestsPerCountry, totalBlocked, totalRequests }; } registry.registerPath({ method: "get", path: "/org/{orgId}/logs/analytics", description: "Query the request audit analytics for an organization", tags: [OpenAPITags.Org], request: { query: queryAccessAuditLogsQuery, params: queryRequestAuditLogsParams }, responses: {} }); export type QueryRequestAnalyticsResponse = Awaited>; export async function queryRequestAnalytics( req: Request, res: Response, next: NextFunction ): Promise { try { const parsedQuery = queryAccessAuditLogsQuery.safeParse(req.query); if (!parsedQuery.success) { return next( createHttpError( HttpCode.BAD_REQUEST, fromError(parsedQuery.error) ) ); } const parsedParams = queryRequestAuditLogsParams.safeParse(req.params); if (!parsedParams.success) { return next( createHttpError( HttpCode.BAD_REQUEST, fromError(parsedParams.error) ) ); } const params = { ...parsedQuery.data, ...parsedParams.data }; const data = await query(params); return response(res, { data, success: true, error: false, message: "Request audit analytics retrieved successfully", status: HttpCode.OK }); } catch (error) { logger.error(error); return next( createHttpError(HttpCode.INTERNAL_SERVER_ERROR, "An error occurred") ); } }