Kenearos
b2dbd31b41
Fuegt users/login_tokens/sessions/audit_log Tabellen + FK-Indizes zu server/db.js hinzu (foreign_keys=ON fuer CASCADE), plus server/audit.js (append-only, keine PII). Bestehende documents/history-Tabellen und exports unveraendert. TDD: server/auth-schema.test.js zuerst rot, dann gruen; volle Suite (24 Tests) regressionsfrei.
9 lines
353 B
JavaScript
9 lines
353 B
JavaScript
const { db } = require('./db');
|
|
|
|
// Append-only Audit-Log. Keine PII (kein E-Mail/Name) — nur event, user_id, ip_hash.
|
|
function audit(event, userId = null, ipHash = null) {
|
|
db.prepare('INSERT INTO audit_log (ts, event, user_id, ip_hash) VALUES (?, ?, ?, ?)')
|
|
.run(new Date().toISOString(), event, userId, ipHash);
|
|
}
|
|
|
|
module.exports = { audit };
|