curo/kite
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(phase-4-06): admin audit log viewer + CSV export (ADMIN-06)

Browse Source 
- Create backend/api/audit.py: GET /api/admin/audit-log (paginated, filtered)
  and GET /api/admin/audit-log/export (streaming CSV)
- Both endpoints protected by Depends(get_current_admin) — regular users → 403
- _audit_to_dict() whitelist explicitly excludes filename, extracted_text,
  password_hash, credentials_enc (T-04-06-02, D-15)
- CSV export uses same helper as JSON viewer; Content-Disposition: attachment
- Register audit_router in backend/main.py
This commit is contained in:
curo1305
2026-05-25 18:48:02 +02:00
parent 8e6cb6e7d0
commit 364447d0bc
2 changed files with 166 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/main.py
+4
View File
@@ -187,3 +187,7 @@ app.include_router(document_move_router)
# Phase 4: shares router (SHARE-01..05)
from api.shares import router as shares_router # noqa: E402
app.include_router(shares_router)
# Phase 4: audit log viewer + CSV export (ADMIN-06)
from api.audit import router as audit_router # noqa: E402
app.include_router(audit_router)