105 lines
3.1 KiB
PHP
105 lines
3.1 KiB
PHP
<?php
|
||
|
||
namespace App\Services;
|
||
|
||
use App\Models\Document;
|
||
use App\Models\User;
|
||
use Illuminate\Support\Facades\Log;
|
||
|
||
/**
|
||
* 安全日志记录服务
|
||
* 用于记录系统中的安全相关事件
|
||
*/
|
||
class SecurityLogger
|
||
{
|
||
/**
|
||
* 记录未授权的文档访问尝试
|
||
* 需求：7.3
|
||
*
|
||
* @param User $user 尝试访问的用户
|
||
* @param Document $document 被访问的文档
|
||
* @param string $action 尝试的操作 (view, download, update, delete 等)
|
||
* @param string|null $ipAddress IP 地址
|
||
* @return void
|
||
*/
|
||
public function logUnauthorizedAccess(
|
||
User $user,
|
||
Document $document,
|
||
string $action,
|
||
?string $ipAddress = null
|
||
): void {
|
||
$ipAddress = $ipAddress ?? request()->ip();
|
||
|
||
Log::channel('security')->warning('未授权访问尝试', [
|
||
'event' => 'unauthorized_access',
|
||
'action' => $action,
|
||
'user_id' => $user->id,
|
||
'user_name' => $user->name,
|
||
'user_email' => $user->email,
|
||
'document_id' => $document->id,
|
||
'document_title' => $document->title,
|
||
'document_knowledge_base_id' => $document->knowledge_base_id,
|
||
'ip_address' => $ipAddress,
|
||
'timestamp' => now()->toIso8601String(),
|
||
'user_agent' => request()->userAgent(),
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* 记录权限验证失败
|
||
*
|
||
* @param User $user 用户
|
||
* @param string $resource 资源类型
|
||
* @param int|null $resourceId 资源 ID
|
||
* @param string $action 操作
|
||
* @param string|null $reason 失败原因
|
||
* @return void
|
||
*/
|
||
public function logAuthorizationFailure(
|
||
User $user,
|
||
string $resource,
|
||
?int $resourceId,
|
||
string $action,
|
||
?string $reason = null
|
||
): void {
|
||
Log::channel('security')->warning('权限验证失败', [
|
||
'event' => 'authorization_failure',
|
||
'user_id' => $user->id,
|
||
'user_name' => $user->name,
|
||
'user_email' => $user->email,
|
||
'resource' => $resource,
|
||
'resource_id' => $resourceId,
|
||
'action' => $action,
|
||
'reason' => $reason,
|
||
'ip_address' => request()->ip(),
|
||
'timestamp' => now()->toIso8601String(),
|
||
'user_agent' => request()->userAgent(),
|
||
]);
|
||
}
|
||
|
||
/**
|
||
* 记录可疑的访问模式
|
||
*
|
||
* @param User $user 用户
|
||
* @param string $pattern 可疑模式描述
|
||
* @param array $context 额外的上下文信息
|
||
* @return void
|
||
*/
|
||
public function logSuspiciousActivity(
|
||
User $user,
|
||
string $pattern,
|
||
array $context = []
|
||
): void {
|
||
Log::channel('security')->alert('检测到可疑活动', array_merge([
|
||
'event' => 'suspicious_activity',
|
||
'user_id' => $user->id,
|
||
'user_name' => $user->name,
|
||
'user_email' => $user->email,
|
||
'pattern' => $pattern,
|
||
'ip_address' => request()->ip(),
|
||
'timestamp' => now()->toIso8601String(),
|
||
'user_agent' => request()->userAgent(),
|
||
], $context));
|
||
}
|
||
}
|