33927b150b
- All 16 route files now import pool from ../db directly
- Removed db parameter from all factory functions
- All callbacks replaced with async/await pool.query()
- All ? placeholders converted to $1, $2... numbered params
- datetime('now') → NOW(), INSERT OR IGNORE → ON CONFLICT DO NOTHING
- LIKE → ILIKE for case-insensitive searches
- Error detection: err.code === '23505' for unique violations
- server.js no longer passes pool/db/requireAuth to route factories
- Only ivantiFindings.js still receives pool (pending task 8 rewrite)
20 lines
724 B
JavaScript
20 lines
724 B
JavaScript
// Audit Log Helper
|
|
// Fire-and-forget insert - never blocks the response
|
|
const pool = require('../db');
|
|
|
|
function logAudit({ userId, username, action, entityType, entityId, details, ipAddress }) {
|
|
const detailsStr = details && typeof details === 'object'
|
|
? JSON.stringify(details)
|
|
: details || null;
|
|
|
|
pool.query(
|
|
`INSERT INTO audit_logs (user_id, username, action, entity_type, entity_id, details, ip_address)
|
|
VALUES ($1, $2, $3, $4, $5, $6, $7)`,
|
|
[userId || null, username || 'unknown', action, entityType, entityId || null, detailsStr, ipAddress || null]
|
|
).catch((err) => {
|
|
console.error('Audit log error:', err.message);
|
|
});
|
|
}
|
|
|
|
module.exports = logAudit;
|