F1 告警静默规则 [done]: - 后端 alert_silence.go: CRUD + Toggle (onetime/daily/weekly 三模式) - 告警引擎 isSilenced 集成 (alert_engine.go) - 前端 SilenceRuleTab + SilenceDialog - 路由 /alerts/silences 已注册 F2 审计日志导出 [done]: - 重写 ExportAuditLogs: 真正的 CSV 导出 (encoding/csv + UTF-8 BOM) - 支持 module/action/username/startTime/endTime 筛选 - 导出限制 10000 条防溢出,自动记录审计日志 - JSON 格式向后兼容 (format=json) - 前端 exportLogs 传递查询参数 同时包含累积的前期工作: - 目录重构 internal/ -> controller/model/router (v0.55-v0.57) - 后端分层架构 dto/repository/service/utils - 审计模块全功能 (终端审计/操作审计/登录日志) - asciicast v2 录制格式 - SFTP 文件浏览器 - StatStrip 紧凑统计条 - 在线会话自动刷新 - LiveMonitor WebSocket 诊断修复 验证: go build ✅ | npm run build ✅ | Docker 部署 ✅ | 10 回归端点 ✅ | CSV 导出 ✅ | 静默 CRUD ✅
131 lines
2.9 KiB
Go
131 lines
2.9 KiB
Go
// 终端审计实时流 Hub — 在线会话内容广播给审计查看者 // Logan.Li
|
|
package controller
|
|
|
|
import (
|
|
"log"
|
|
"net/http"
|
|
"sync"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/gorilla/websocket"
|
|
)
|
|
|
|
// AuditHub 终端审计流中心 — 管理所有活跃会话的审计订阅者
|
|
type AuditHub struct {
|
|
mu sync.RWMutex
|
|
watchers map[uint]map[chan []byte]struct{} // sessionID -> set of watcher channels
|
|
}
|
|
|
|
// NewAuditHub 创建审计 Hub
|
|
func NewAuditHub() *AuditHub {
|
|
return &AuditHub{
|
|
watchers: make(map[uint]map[chan []byte]struct{}),
|
|
}
|
|
}
|
|
|
|
// Subscribe 订阅某个会话的实时输出
|
|
func (h *AuditHub) Subscribe(sessionID uint) chan []byte {
|
|
ch := make(chan []byte, 256)
|
|
h.mu.Lock()
|
|
defer h.mu.Unlock()
|
|
if h.watchers[sessionID] == nil {
|
|
h.watchers[sessionID] = make(map[chan []byte]struct{})
|
|
}
|
|
h.watchers[sessionID][ch] = struct{}{}
|
|
return ch
|
|
}
|
|
|
|
// Unsubscribe 取消订阅
|
|
func (h *AuditHub) Unsubscribe(sessionID uint, ch chan []byte) {
|
|
h.mu.Lock()
|
|
defer h.mu.Unlock()
|
|
if watchers, ok := h.watchers[sessionID]; ok {
|
|
delete(watchers, ch)
|
|
close(ch)
|
|
if len(watchers) == 0 {
|
|
delete(h.watchers, sessionID)
|
|
}
|
|
}
|
|
}
|
|
|
|
// Broadcast 向所有订阅者广播终端输出数据(非阻塞)
|
|
func (h *AuditHub) Broadcast(sessionID uint, data []byte) {
|
|
h.mu.RLock()
|
|
watchers, ok := h.watchers[sessionID]
|
|
h.mu.RUnlock()
|
|
if !ok || len(watchers) == 0 {
|
|
return
|
|
}
|
|
for ch := range watchers {
|
|
select {
|
|
case ch <- data:
|
|
default:
|
|
}
|
|
}
|
|
}
|
|
|
|
// Cleanup 清理某个会话的所有订阅者
|
|
func (h *AuditHub) Cleanup(sessionID uint) {
|
|
h.mu.Lock()
|
|
defer h.mu.Unlock()
|
|
if watchers, ok := h.watchers[sessionID]; ok {
|
|
for ch := range watchers {
|
|
close(ch)
|
|
}
|
|
delete(h.watchers, sessionID)
|
|
}
|
|
}
|
|
|
|
var auditUpgrader = websocket.Upgrader{
|
|
CheckOrigin: func(r *http.Request) bool { return true },
|
|
ReadBufferSize: 1024,
|
|
WriteBufferSize: 1024,
|
|
}
|
|
|
|
// ServeAuditStream 处理 /ws/audit/:sessionId WebSocket — 实时推送终端输出
|
|
func (h *AuditHub) ServeAuditStream(c *gin.Context, sessionID uint, historyData string, sessionInfo map[string]interface{}) {
|
|
conn, err := auditUpgrader.Upgrade(c.Writer, c.Request, nil)
|
|
if err != nil {
|
|
log.Printf("[AuditStream] WS 升级失败 session=%d: %v", sessionID, err)
|
|
return
|
|
}
|
|
defer conn.Close()
|
|
|
|
// 发送会话元信息
|
|
conn.WriteJSON(map[string]interface{}{
|
|
"type": "session_info",
|
|
"payload": sessionInfo,
|
|
})
|
|
|
|
// 发送历史数据(已录制的输出)
|
|
if historyData != "" {
|
|
conn.WriteJSON(map[string]interface{}{
|
|
"type": "history",
|
|
"data": historyData,
|
|
})
|
|
}
|
|
|
|
// 订阅实时流
|
|
ch := h.Subscribe(sessionID)
|
|
defer h.Unsubscribe(sessionID, ch)
|
|
|
|
// goroutine 读取关闭信号
|
|
go func() {
|
|
for {
|
|
if _, _, err := conn.ReadMessage(); err != nil {
|
|
break
|
|
}
|
|
}
|
|
}()
|
|
|
|
// 推送实时数据
|
|
for data := range ch {
|
|
if err := conn.WriteJSON(map[string]interface{}{
|
|
"type": "output",
|
|
"data": string(data),
|
|
}); err != nil {
|
|
break
|
|
}
|
|
}
|
|
}
|