22ef5b6d1f
- 迁移 087: audit_logs 表添加 prev_hash/record_hash 列 + 索引 - audit_service::record() 写入时查询前一条 record_hash 作为 prev_hash - SHA256(id+action+resource_type+resource_id+created_at+prev_hash) 计算 record_hash - verify_hash_chain() 验证链完整性，返回 (总记录数, 断链数)
30 lines
1.0 KiB
Rust
30 lines
1.0 KiB
Rust
use sea_orm::entity::prelude::*;
|
|
use serde::{Deserialize, Serialize};
|
|
|
|
/// 审计日志实体 — 映射 audit_logs 表。
|
|
#[derive(Clone, Debug, PartialEq, DeriveEntityModel, Serialize, Deserialize)]
|
|
#[sea_orm(table_name = "audit_logs")]
|
|
pub struct Model {
|
|
#[sea_orm(primary_key, auto_increment = false)]
|
|
pub id: Uuid,
|
|
pub tenant_id: Uuid,
|
|
pub user_id: Option<Uuid>,
|
|
pub action: String,
|
|
pub resource_type: String,
|
|
pub resource_id: Option<Uuid>,
|
|
pub old_value: Option<serde_json::Value>,
|
|
pub new_value: Option<serde_json::Value>,
|
|
pub ip_address: Option<String>,
|
|
pub user_agent: Option<String>,
|
|
pub created_at: DateTimeUtc,
|
|
/// 哈希链 — 前一条记录的 record_hash
|
|
pub prev_hash: Option<String>,
|
|
/// 当前记录的哈希 SHA256(id + action + resource_type + resource_id + created_at + prev_hash)
|
|
pub record_hash: Option<String>,
|
|
}
|
|
|
|
#[derive(Copy, Clone, Debug, EnumIter, DeriveRelation)]
|
|
pub enum Relation {}
|
|
|
|
impl ActiveModelBehavior for ActiveModel {}
|