from flask import Blueprint, render_template, request, jsonify from flask_login import current_user, login_required from app.models.log import Log from app.models.user import User, db # 导入db from app.utils.auth import permission_required # 更改为导入permission_required装饰器 from datetime import datetime, timedelta # 创建蓝图 log_bp = Blueprint('log', __name__, url_prefix='/log') @log_bp.route('/list') @login_required @permission_required('view_logs') # 替代 @admin_required def log_list(): """日志列表页面""" # 获取筛选参数 page = request.args.get('page', 1, type=int) user_id = request.args.get('user_id', type=int) action = request.args.get('action') target_type = request.args.get('target_type') # 处理日期范围参数 date_range = request.args.get('date_range', '7') # 默认显示7天内的日志 end_date = datetime.now() start_date = None if date_range == '1': start_date = end_date - timedelta(days=1) elif date_range == '7': start_date = end_date - timedelta(days=7) elif date_range == '30': start_date = end_date - timedelta(days=30) elif date_range == 'custom': start_date_str = request.args.get('start_date') end_date_str = request.args.get('end_date') if start_date_str: start_date = datetime.strptime(start_date_str, '%Y-%m-%d') if end_date_str: end_date = datetime.strptime(end_date_str + ' 23:59:59', '%Y-%m-%d %H:%M:%S') # 获取分页数据 pagination = Log.get_logs( page=page, per_page=20, user_id=user_id, action=action, target_type=target_type, start_date=start_date, end_date=end_date ) # 获取用户列表和操作类型列表,用于筛选 users = User.query.all() # 统计各类操作的数量 action_types = db.session.query(Log.action, db.func.count(Log.id)) \ .group_by(Log.action).all() target_types = db.session.query(Log.target_type, db.func.count(Log.id)) \ .filter(Log.target_type != None) \ .group_by(Log.target_type).all() return render_template( 'log/list.html', pagination=pagination, users=users, action_types=action_types, target_types=target_types, filters={ 'user_id': user_id, 'action': action, 'target_type': target_type, 'date_range': date_range, 'start_date': start_date.strftime('%Y-%m-%d') if start_date else '', 'end_date': end_date.strftime('%Y-%m-%d') if end_date != datetime.now() else '' } ) @log_bp.route('/detail/') @login_required @permission_required('view_logs') # 替代 @admin_required def log_detail(log_id): """日志详情页面""" log = Log.query.get_or_404(log_id) return render_template('log/detail.html', log=log) @log_bp.route('/api/export', methods=['POST']) @login_required @permission_required('view_logs') # 替代 @admin_required def export_logs(): """导出日志API""" import csv from io import StringIO from flask import Response data = request.get_json() user_id = data.get('user_id') action = data.get('action') target_type = data.get('target_type') start_date_str = data.get('start_date') end_date_str = data.get('end_date') # 处理日期范围 start_date = None end_date = datetime.now() if start_date_str: start_date = datetime.strptime(start_date_str, '%Y-%m-%d') if end_date_str: end_date = datetime.strptime(end_date_str + ' 23:59:59', '%Y-%m-%d %H:%M:%S') # 查询日志 query = Log.query.order_by(Log.created_at.desc()) if user_id: query = query.filter(Log.user_id == user_id) if action: query = query.filter(Log.action == action) if target_type: query = query.filter(Log.target_type == target_type) if start_date: query = query.filter(Log.created_at >= start_date) if end_date: query = query.filter(Log.created_at <= end_date) logs = query.all() # 生成CSV文件 si = StringIO() csv_writer = csv.writer(si) # 写入标题行 csv_writer.writerow(['ID', '用户', '操作类型', '目标类型', '目标ID', 'IP地址', '描述', '创建时间']) # 写入数据行 for log in logs: username = log.user.username if log.user else "未登录" csv_writer.writerow([ log.id, username, log.action, log.target_type or '', log.target_id or '', log.ip_address or '', log.description or '', log.created_at.strftime('%Y-%m-%d %H:%M:%S') ]) # 设置响应头,使浏览器将其识别为下载文件 filename = f"system_logs_{datetime.now().strftime('%Y%m%d_%H%M%S')}.csv" output = si.getvalue() # 返回Base64编码的CSV数据 import base64 encoded_data = base64.b64encode(output.encode('utf-8')).decode('utf-8') return jsonify({ 'success': True, 'message': f'已生成 {len(logs)} 条日志记录', 'count': len(logs), 'filename': filename, 'filedata': encoded_data, 'filetype': 'text/csv' }) @log_bp.route('/api/clear', methods=['POST']) @login_required @permission_required('view_logs') # 替代 @admin_required def clear_logs(): """清空日志API""" data = request.get_json() days = data.get('days', 0) try: if days > 0: # 清除指定天数前的日志 cutoff_date = datetime.now() - timedelta(days=days) deleted = Log.query.filter(Log.created_at < cutoff_date).delete() else: # 清空全部日志 deleted = Log.query.delete() db.session.commit() return jsonify({ 'success': True, 'message': f'成功清除 {deleted} 条日志记录', 'count': deleted }) except Exception as e: db.session.rollback() return jsonify({ 'success': False, 'message': f'清除日志失败: {str(e)}' }), 500