bvandeusen
3c70ac56b3
- Add OIDC (OpenID Connect) authentication with discovery URL support, group-based role mapping, and token introspection - Add LDAP authentication with bind credentials, group-based role mapping, and configurable attribute names - Add audit log (model, routes, templates) tracking settings changes, plugin enable/disable, login events - Add migrations 0009 (widget variants), 0010 (maintenance windows), 0011 (audit log) - Add optional dependency groups to pyproject.toml: [ldap], [snmp] - Add Settings → Auth tab with OIDC and LDAP configuration forms Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
43 lines
1.4 KiB
Python
43 lines
1.4 KiB
Python
from __future__ import annotations
|
|
import json
|
|
from quart import Blueprint, render_template, request, current_app
|
|
from sqlalchemy import select
|
|
from fabledscryer.auth.middleware import require_role
|
|
from fabledscryer.models.audit import AuditEvent
|
|
from fabledscryer.models.users import UserRole
|
|
|
|
audit_bp = Blueprint("audit", __name__, url_prefix="/audit")
|
|
|
|
|
|
@audit_bp.get("/")
|
|
@require_role(UserRole.admin)
|
|
async def list_events():
|
|
limit = min(int(request.args.get("limit", 200)), 500)
|
|
action_filter = request.args.get("action", "").strip()
|
|
async with current_app.db_sessionmaker() as db:
|
|
stmt = select(AuditEvent).order_by(AuditEvent.timestamp.desc()).limit(limit)
|
|
if action_filter:
|
|
stmt = select(AuditEvent).where(
|
|
AuditEvent.action.like(f"{action_filter}%")
|
|
).order_by(AuditEvent.timestamp.desc()).limit(limit)
|
|
result = await db.execute(stmt)
|
|
events = result.scalars().all()
|
|
|
|
# Parse detail_json for display
|
|
parsed = []
|
|
for e in events:
|
|
detail = {}
|
|
if e.detail_json:
|
|
try:
|
|
detail = json.loads(e.detail_json)
|
|
except (ValueError, TypeError):
|
|
detail = {"raw": e.detail_json}
|
|
parsed.append({"event": e, "detail": detail})
|
|
|
|
return await render_template(
|
|
"audit/list.html",
|
|
events=parsed,
|
|
limit=limit,
|
|
action_filter=action_filter,
|
|
)
|