audit.js

Go to the documentation of this file.

// utils/audit.js
const pool = require('../services/db');
 
/**
 * Log impersonation events to the impersonation_audit table
 * @param {object} params
 * @param {string} params.impersonatorId - UUID of the impersonator
 * @param {string} params.impersonatorName - Name of the impersonator
 * @param {string} params.impersonatedTenantId - UUID of the impersonated tenant
 * @param {string} params.impersonatedTenantName - Name of the impersonated tenant
 * @param {string} params.action - 'start', 'stop', 'switch'
 * @param {object} params.req - Express request object
 */
async function logImpersonation({
  impersonatorId,
  impersonatorName,
  impersonatedTenantId,
  impersonatedTenantName,
  action,
  req
}) {
  try {
    await pool.query(
      `INSERT INTO impersonation_audit 
        (impersonator_id, impersonator_name, impersonated_tenant_id, impersonated_tenant_name, action, ip_address, user_agent)
        VALUES ($1, $2, $3, $4, $5, $6, $7)`,
      [
        impersonatorId,
        impersonatorName,
        impersonatedTenantId,
        impersonatedTenantName,
        action,
        req.ip,
        req.get('User-Agent')
      ]
    );
  } catch (err) {
    console.error('[Audit] Failed to log impersonation:', err);
  }
}
 
module.exports = { logImpersonation };