Feature/auditlogs

src/main/java/backendlab/team4you/Team4youApplication.java

@@ -7,6 +7,7 @@
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
 import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.EnableAspectJAutoProxy;
 import org.springframework.context.annotation.Profile;
 import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
 import org.springframework.security.web.webauthn.api.Bytes;

src/main/java/backendlab/team4you/audit/AspectConfig.java

@@ -0,0 +1,14 @@
+package backendlab.team4you.audit;
+
+
+import org.springframework.context.annotation.Configuration;
+import org.springframework.context.annotation.EnableAspectJAutoProxy;
+
+@Configuration
+@EnableAspectJAutoProxy
+public class AspectConfig {
+
+
+
+}
+

src/main/java/backendlab/team4you/audit/AuditAction.java

@@ -0,0 +1,13 @@
+package backendlab.team4you.audit;
+
+import java.lang.annotation.ElementType;
+import java.lang.annotation.Retention;
+import java.lang.annotation.RetentionPolicy;
+import java.lang.annotation.Target;
+
+@Target(ElementType.METHOD)
+@Retention(RetentionPolicy.RUNTIME)
+public @interface AuditAction {
+    String action();
+    String entity();
+}

src/main/java/backendlab/team4you/audit/AuditAspect.java

@@ -0,0 +1,90 @@
+package backendlab.team4you.audit;
+
+import org.aspectj.lang.JoinPoint;
+import org.aspectj.lang.annotation.AfterReturning;
+import org.aspectj.lang.annotation.AfterThrowing;
+import org.aspectj.lang.annotation.Aspect;
+import org.aspectj.lang.annotation.Pointcut;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.stereotype.Component;
+import org.springframework.web.context.request.RequestContextHolder;
+import org.springframework.web.context.request.ServletRequestAttributes;
+
+@Aspect
+@Component
+public class AuditAspect {
+
+    private static final Logger log = LoggerFactory.getLogger(AuditAspect.class);
+
+    private final AuditService auditService;
+
+    public AuditAspect(AuditService auditService) {
+        this.auditService = auditService;
+    }
+
+    @Pointcut("within(backendlab.team4you..*)")
+    public void controllerMethods() {}
+
+    @AfterReturning(pointcut = "@annotation(auditAction)", returning = "result")
+    public void logAuditSuccess(JoinPoint joinPoint, AuditAction auditAction, Object result) {
+        record(joinPoint, auditAction, "SUCCESS");
+    }
+
+    @AfterThrowing(pointcut = "@annotation(auditAction)", throwing = "ex")
+    public void logAuditFailure(JoinPoint joinPoint, AuditAction auditAction, Throwable ex) {
+        record(joinPoint, auditAction, "FAILURE");
+    }
+
+    private void record(JoinPoint joinPoint, AuditAction auditAction, String status) {
+        try {
+            Authentication auth = SecurityContextHolder.getContext().getAuthentication();
+            String username = (auth != null) ? auth.getName() : "anonymous";
+
+            ServletRequestAttributes attrs = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes();
+            String ip = "unknown";
+            String endpoint = "unknown";
+            String httpMethod = "UNKNOWN";
+
+            if (attrs != null) {
+                ip = attrs.getRequest().getRemoteAddr();
+                endpoint = attrs.getRequest().getRequestURI();
+                httpMethod = attrs.getRequest().getMethod();
+            }
+
+
+            String methodName = joinPoint.getSignature().toShortString();
+            String details = "Executed method: " + methodName;
+            Long entityId = null;
+
+            Object[] args = joinPoint.getArgs();
+            for (Object arg : args) {
+                if (arg instanceof Long) {
+                    entityId = (Long) arg;
+                } else if (arg instanceof String && !((String) arg).contains("/")) {
+                    details = "File/Key: " + arg;
+                }
+            }
+
+            auditService.saveLog(
+                    username,
+                    null,
+                    auditAction.action(),
+                    endpoint,
+                    httpMethod,
+                    ip,
+                    status,
+                    details,
+                    auditAction.entity(),
+                    Math.toIntExact(entityId)
+
+            );
+
+        } catch (Exception e) {
+            log.warn("Failed to persist audit log for {}: {}",
+                    joinPoint.getSignature().toShortString(), e.getMessage(), e);
+        }
+    }
+}

src/main/java/backendlab/team4you/audit/AuditLog.java

@@ -0,0 +1,117 @@
+package backendlab.team4you.audit;
+
+
+import jakarta.persistence.*;
+
+import java.time.ZonedDateTime;
+
+@Entity
+@Table(name = "audit")
+public class AuditLog {
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private Long id;
+
+
+    private String username;
+    private String email;
+
+    String details;
+
+    private String action;
+
+    private String httpMethod;
+
+    private String endpoint;
+
+    private String entityType;
+
+    private Long entityId;
+
+    @Column(name = "ip_address")
+    private String ipAddress;
+
+
+    private ZonedDateTime timestamp;
+
+    private String status;
+
+
+    public AuditLog() {
+    }
+
+    public void setId(Long id) {
+        this.id = id;
+    }
+    public Long getId() {
+        return id;
+    }
+    public String getUsername() {
+        return username;
+    }
+    public void setUsername(String username) {
+        this.username = username;
+    }
+    public String getEmail() {
+        return email;
+    }
+    public void setEmail(String email) {
+        this.email = email;
+    }
+    public String getAction() {
+        return action;
+    }
+    public void setAction(String action) {
+        this.action = action;
+    }
+    public String getEndpoint() {
+        return endpoint;
+    }
+    public void setEndpoint(String endpoint) {
+        this.endpoint = endpoint;
+    }
+    public String getEntityType() {
+        return entityType;
+    }
+    public void setEntityType(String entityType) {
+        this.entityType = entityType;
+    }
+    public Long getEntityId() {
+        return entityId;
+    }
+    public void setEntityId(Long entityId) {
+        this.entityId = entityId;
+    }
+
+    public String getIpAddress() {
+        return ipAddress;
+    }
+    public void setIpAddress(String ipAddress) {
+        this.ipAddress = ipAddress;
+    }
+    public ZonedDateTime getTimestamp() {
+        return timestamp;
+    }
+    public void setTimestamp(ZonedDateTime timestamp) {
+        this.timestamp = timestamp;
+    }
+    public String getStatus() {
+        return status;
+    }
+    public void setStatus(String status) {
+        this.status = status;
+    }
+    public String getDetails() {
+        return details;
+    }
+    public void setDetails(String details) {
+        this.details = details;
+    }
+    public String getHttpMethod() {
+        return httpMethod;
+    }
+    public void setHttpMethod(String httpMethod) {
+        this.httpMethod = httpMethod;
+    }
+}

src/main/java/backendlab/team4you/audit/AuditLogRepository.java

@@ -0,0 +1,13 @@
+package backendlab.team4you.audit;
+
+import org.springframework.data.jpa.repository.JpaRepository;
+import org.springframework.stereotype.Repository;
+
+import java.util.List;
+
+@Repository
+public interface AuditLogRepository extends JpaRepository<AuditLog, Long> {
+
+
+    List<AuditLog> findAllByOrderByTimestampDesc();
+}

src/main/java/backendlab/team4you/audit/AuditService.java

@@ -0,0 +1,79 @@
+package backendlab.team4you.audit;
+
+
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.stereotype.Service;
+
+import java.time.ZonedDateTime;
+
+@Service
+public class AuditService {
+
+    private static final Logger log = LoggerFactory.getLogger(AuditService.class);
+
+    AuditLogRepository auditLogRepository;
+    public AuditService(AuditLogRepository auditRepository) {
+        this.auditLogRepository = auditRepository;
+    }
+
+    public void saveLog( String username,
+                                 String email,
+                                 String action,
+                                 String endpoint,
+                                 String httpMethod,
+                                 String ipAddress,
+                                 String status,
+                         String details,
+                         String entityType,
+                         int entityId) {
+
+        AuditLog log = new AuditLog();
+
+        log.setUsername(username);
+        log.setEmail(email);
+        log.setAction(action);
+        log.setEndpoint(endpoint);
+        log.setIpAddress(ipAddress);
+        log.setTimestamp(ZonedDateTime.now());
+        log.setDetails(details);
+        log.setStatus(status);
+        log.setHttpMethod(httpMethod);
+                log.setEntityType(entityType);
+                log.setEntityId((long) entityId);
+
+        auditLogRepository.save(log);
+
+
+    }
+
+
+    public void log(String username,
+                    String action,
+                    String entityType,
+                    Long entityId,
+                    String details,
+                    String status) {
+
+        {
+            try {
+                AuditLog auditLog = new AuditLog();
+                auditLog.setUsername(username);
+                auditLog.setAction(action);
+                auditLog.setEntityType(entityType);
+                auditLog.setEntityId((long) Math.toIntExact(entityId));
+                auditLog.setDetails(details);
+                auditLog.setStatus(status);
+                auditLog.setTimestamp(ZonedDateTime.now());
+
+                auditLogRepository.save(auditLog);
+
+                log.info("Audit log saved: action={}, entity={}:{}", action, entityType, entityId);
+
+            } catch (Exception e) {
+                System.out.println("Failed to save audit log " + e.getMessage());
+            }
+        }
+
+    }
+}

src/main/java/backendlab/team4you/audit/AuditStatus.java

@@ -0,0 +1,8 @@
+package backendlab.team4you.audit;
+
+public enum AuditStatus {
+    SUCCESS,
+    FAILURE,
+    PENDING
+
+}

src/main/java/backendlab/team4you/casefile/CaseFileController.java

@@ -1,5 +1,6 @@
 package backendlab.team4you.casefile;
 
+import backendlab.team4you.audit.AuditAction;
 import backendlab.team4you.common.ConfidentialityLevel;
 import backendlab.team4you.user.UserEntity;
 import backendlab.team4you.user.UserService;
@@ -30,6 +31,7 @@ public CaseFileController(CaseFileService caseFileService, UserService userServi
     }
 
     @PostMapping
+    @AuditAction(action = "FILE_UPLOAD", entity = "CASE_FILE")
     public ResponseEntity<CaseFileResponseDto> uploadFile(
             @PathVariable Long caseRecordId,
             @RequestParam("file") MultipartFile file,
@@ -42,6 +44,7 @@ public ResponseEntity<CaseFileResponseDto> uploadFile(
     }
 
     @GetMapping
+    @AuditAction(action = "FILE_DOWNLOAD", entity = "CASE_FILE")
     public ResponseEntity<List<CaseFileListItemDto>> listFiles(
             @PathVariable Long caseRecordId,
             Principal principal
@@ -55,6 +58,7 @@ public ResponseEntity<List<CaseFileListItemDto>> listFiles(
     }
 
     @GetMapping("/{fileId}")
+    @AuditAction(action = "FILE_DOWNLOAD", entity = "CASE_FILE")
     public ResponseEntity<StreamingResponseBody> downloadFile(
             @PathVariable Long caseRecordId,
             @PathVariable Long fileId,
@@ -87,6 +91,7 @@ public ResponseEntity<StreamingResponseBody> downloadFile(
     }
 
     @DeleteMapping("/{fileId}")
+    @AuditAction(action = "FILE_DELETE", entity = "CASE_FILE")
     public ResponseEntity<Void> deleteFile(
             @PathVariable Long caseRecordId,
             @PathVariable Long fileId,