| | | 1 | | using ArturRios.Data.Relational.Core.Interfaces; |
| | | 2 | | using ArturRios.Heimdall.Domain.Entities; |
| | | 3 | | using ArturRios.Heimdall.Shared.Security; |
| | | 4 | | |
| | | 5 | | namespace ArturRios.Heimdall.Command.Auditing; |
| | | 6 | | |
| | 1043 | 7 | | public class AuditLogWriter(IAsyncRepository<AuditLog, long> repository, IActorAccessor actorAccessor) |
| | | 8 | | : IAuditLogWriter |
| | | 9 | | { |
| | | 10 | | /// <summary>Longest failure reason stored; matches AUDIT_LOG.failure_reason's column.</summary> |
| | | 11 | | private const int MaxFailureReasonLength = 500; |
| | | 12 | | |
| | | 13 | | public async Task WriteAsync(string action, Guid? targetId, bool succeeded, string? failureReason) |
| | | 14 | | { |
| | 1043 | 15 | | var entry = new AuditLog |
| | 1043 | 16 | | { |
| | 1043 | 17 | | PublicId = Guid.NewGuid(), |
| | 1043 | 18 | | ActorPersonId = actorAccessor.ActorPersonId, |
| | 1043 | 19 | | ActorRole = actorAccessor.ActorRole, |
| | 1043 | 20 | | Action = action, |
| | 1043 | 21 | | TargetId = targetId, |
| | 1043 | 22 | | Succeeded = succeeded, |
| | 1043 | 23 | | // Truncated rather than allowed to fail the insert: a reason too long for the column |
| | 1043 | 24 | | // would otherwise turn a recorded refusal into no record at all, which is the one |
| | 1043 | 25 | | // outcome the trail must not have. |
| | 1043 | 26 | | FailureReason = failureReason is { Length: > MaxFailureReasonLength } |
| | 1043 | 27 | | ? failureReason[..MaxFailureReasonLength] |
| | 1043 | 28 | | : failureReason, |
| | 1043 | 29 | | CreatedAt = DateTime.UtcNow |
| | 1043 | 30 | | }; |
| | | 31 | | |
| | | 32 | | // The repository reports a failed insert in its output instead of throwing. Surface it, so |
| | | 33 | | // the caller's catch-and-warn sees it; the message carries the action and the repository's |
| | | 34 | | // own error text only, never the entry's actor or other personal data. |
| | 1043 | 35 | | var output = await repository.CreateAsync(entry); |
| | | 36 | | |
| | 1043 | 37 | | if (!output.Success) |
| | | 38 | | { |
| | 7 | 39 | | throw new InvalidOperationException( |
| | 7 | 40 | | $"Failed to save audit log entry for {action}: {string.Join("; ", output.Errors)}"); |
| | | 41 | | } |
| | 1036 | 42 | | } |
| | | 43 | | } |