JiuContinent
e3a4a6d426
feat: 添加审批系统和遗留查询功能支持 - 添加审批系统，包括审批请求模型、服务和路由，支持创建、批准和拒绝操作 - 实现审批API密钥验证机制，区分普通API和审批API访问权限 - 添加Alembic数据库迁移支持，更新初始schema版本并添加降级保护 - 配置遗留MySQL查询白名单机制，支持命名查询和参数化查询 - 更新业务服务以集成审批流程，高风险操作需要审批票证 - 调整安全认证使用常量定义的HTTP头，增强安全性比较 - 优化.gitignore配置，添加日志目录排除和文档文件包含规则 - 更新Dockerfile添加alembic依赖包，修复OpenClaw适配器错误处理 ```
26 lines
1.3 KiB
Python
26 lines
1.3 KiB
Python
from datetime import datetime
|
|
|
|
from sqlalchemy import DateTime, Integer, String, Text
|
|
from sqlalchemy.orm import Mapped, mapped_column
|
|
|
|
from app.core.constants import ActorValue
|
|
from app.core.db_base import Base
|
|
from app.core.time import utc_now
|
|
from app.modules.audit.constants import AuditRiskLevel, AuditSource, AuditStatus
|
|
|
|
|
|
class AuditLog(Base):
|
|
__tablename__ = "audit_logs"
|
|
|
|
id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
|
|
actor: Mapped[str] = mapped_column(String(128), default=ActorValue.SYSTEM, index=True)
|
|
source: Mapped[str] = mapped_column(String(64), default=AuditSource.API, index=True)
|
|
action: Mapped[str] = mapped_column(String(128), index=True)
|
|
target_type: Mapped[str | None] = mapped_column(String(128), nullable=True)
|
|
target_id: Mapped[str | None] = mapped_column(String(128), nullable=True)
|
|
risk_level: Mapped[str] = mapped_column(String(32), default=AuditRiskLevel.LOW, index=True)
|
|
request_payload: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
response_payload: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
status: Mapped[str] = mapped_column(String(32), default=AuditStatus.SUCCESS, index=True)
|
|
created_at: Mapped[datetime] = mapped_column(DateTime, default=utc_now, index=True)
|