暂存

internal/handler/admin/audit.go

@@ -121,15 +121,115 @@ func (h *AuditHandler) ResourceTimeline(c *fiber.Ctx) error {
 	return response.Success(c, result)
 }
 
+// RequestTimeline 查询指定 HTTP 请求关联的跨事实时间线。
+// GET /api/admin/audit/requests/:request_id/timeline
+func (h *AuditHandler) RequestTimeline(c *fiber.Ctx) error {
+	requestID := c.Params("request_id")
+	if requestID == "" {
+		return errors.New(errors.CodeInvalidParam)
+	}
+	result, err := h.auditQuery.RequestTimeline(c.UserContext(), requestID)
+	if err != nil {
+		return err
+	}
+	return response.Success(c, result)
+}
+
+// CorrelationTimeline 查询跨请求业务关联时间线。
+// GET /api/admin/audit/correlations/:correlation_id/timeline
+func (h *AuditHandler) CorrelationTimeline(c *fiber.Ctx) error {
+	correlationID := c.Params("correlation_id")
+	if correlationID == "" {
+		return errors.New(errors.CodeInvalidParam)
+	}
+	result, err := h.auditQuery.CorrelationTimeline(c.UserContext(), correlationID)
+	if err != nil {
+		return err
+	}
+	return response.Success(c, result)
+}
+
+// FinanceTimeline 查询资金审计与业务账本的组合时间线。
+// GET /api/admin/audit/finance/timeline
+func (h *AuditHandler) FinanceTimeline(c *fiber.Ctx) error {
+	var request dto.AuditFinanceTimelineRequest
+	if err := c.QueryParser(&request); err != nil || invalidAuditPage(request.Page, request.PageSize) {
+		return errors.New(errors.CodeInvalidParam)
+	}
+	from, to, err := auditTimeRange(request.CreatedFrom, request.CreatedTo)
+	if err != nil {
+		return errors.New(errors.CodeInvalidParam)
+	}
+	result, err := h.auditQuery.FinanceTimeline(c.UserContext(), auditquery.FinanceFilter{
+		ShopID: request.ShopID, WalletID: request.WalletID, OrderID: request.OrderID, OrderNo: request.OrderNo,
+		PaymentID: request.PaymentID, PaymentNo: request.PaymentNo, RefundID: request.RefundID, RefundNo: request.RefundNo,
+		RechargeID: request.RechargeID, RechargeNo: request.RechargeNo, ApprovalInstanceID: request.ApprovalInstanceID,
+		ThirdPartyTradeNo: request.ThirdPartyTradeNo, ActorKind: request.ActorKind, ActorID: request.ActorID,
+		CorrelationID: request.CorrelationID, CreatedFrom: from, CreatedTo: to, Page: request.Page, PageSize: request.PageSize,
+	})
+	if err != nil {
+		return err
+	}
+	return response.Success(c, result)
+}
+
+// RiskOverview 查询固定风险信号总览。
+// GET /api/admin/audit/risks/overview
+func (h *AuditHandler) RiskOverview(c *fiber.Ctx) error {
+	var request dto.AuditRiskOverviewRequest
+	if err := c.QueryParser(&request); err != nil {
+		return errors.New(errors.CodeInvalidParam)
+	}
+	filter, err := riskFilter(request.AuditRiskFilterRequest, 0, 0)
+	if err != nil {
+		return err
+	}
+	result, err := h.auditQuery.RiskOverview(c.UserContext(), filter)
+	if err != nil {
+		return err
+	}
+	return response.Success(c, result)
+}
+
+// RiskEvents 查询固定风险集合的事件明细。
+// GET /api/admin/audit/risks/events
+func (h *AuditHandler) RiskEvents(c *fiber.Ctx) error {
+	var request dto.AuditRiskEventsRequest
+	if err := c.QueryParser(&request); err != nil || invalidAuditPage(request.Page, request.PageSize) {
+		return errors.New(errors.CodeInvalidParam)
+	}
+	filter, err := riskFilter(request.AuditRiskFilterRequest, request.Page, request.PageSize)
+	if err != nil {
+		return err
+	}
+	result, err := h.auditQuery.RiskEvents(c.UserContext(), filter)
+	if err != nil {
+		return err
+	}
+	return response.Success(c, result)
+}
+
+func riskFilter(request dto.AuditRiskFilterRequest, page, pageSize int) (auditquery.RiskFilter, error) {
+	from, to, err := auditTimeRange(request.CreatedFrom, request.CreatedTo)
+	if err != nil {
+		return auditquery.RiskFilter{}, errors.New(errors.CodeInvalidParam)
+	}
+	return auditquery.RiskFilter{
+		CreatedFrom: from, CreatedTo: to, Risk: request.Risk, Result: request.Result,
+		Action: request.Action, Source: request.Source, Page: page, PageSize: pageSize,
+	}, nil
+}
+
 // AgentResourceActivities 查询代理范围内的安全资源活动。
 // GET /api/admin/agent/resource-activities/:resource_type/:identifier
 func (h *AuditHandler) AgentResourceActivities(c *fiber.Ctx) error {
-	request, err := subjectActivityRequest(c)
+	request, from, to, err := subjectActivityRequest(c)
 	if err != nil {
 		return err
 	}
 	result, err := h.auditQuery.AgentResourceActivities(c.UserContext(), auditquery.SubjectActivityFilter{
 		ResourceType: request.ResourceType, Identifier: request.Identifier,
+		CreatedFrom: from, CreatedTo: to,
 		Page: request.Page, PageSize: request.PageSize,
 	})
 	if err != nil {
@@ -141,12 +241,13 @@ func (h *AuditHandler) AgentResourceActivities(c *fiber.Ctx) error {
 // EnterpriseResourceActivities 查询企业当前有效授权资产的安全资源活动。
 // GET /api/admin/enterprise/resource-activities/:resource_type/:identifier
 func (h *AuditHandler) EnterpriseResourceActivities(c *fiber.Ctx) error {
-	request, err := subjectActivityRequest(c)
+	request, from, to, err := subjectActivityRequest(c)
 	if err != nil {
 		return err
 	}
 	result, err := h.auditQuery.EnterpriseResourceActivities(c.UserContext(), auditquery.SubjectActivityFilter{
 		ResourceType: request.ResourceType, Identifier: request.Identifier,
+		CreatedFrom: from, CreatedTo: to,
 		Page: request.Page, PageSize: request.PageSize,
 	})
 	if err != nil {
@@ -155,17 +256,21 @@ func (h *AuditHandler) EnterpriseResourceActivities(c *fiber.Ctx) error {
 	return response.Success(c, result)
 }
 
-func subjectActivityRequest(c *fiber.Ctx) (dto.SubjectResourceActivityRequest, error) {
+func subjectActivityRequest(c *fiber.Ctx) (dto.SubjectResourceActivityRequest, *time.Time, *time.Time, error) {
 	var request dto.SubjectResourceActivityRequest
 	if err := c.QueryParser(&request); err != nil || invalidAuditPage(request.Page, request.PageSize) {
-		return request, errors.New(errors.CodeInvalidParam)
+		return request, nil, nil, errors.New(errors.CodeInvalidParam)
 	}
 	request.ResourceType = c.Params("resource_type")
 	request.Identifier = c.Params("identifier")
 	if request.ResourceType == "" || request.Identifier == "" {
-		return request, errors.New(errors.CodeInvalidParam)
+		return request, nil, nil, errors.New(errors.CodeInvalidParam)
 	}
-	return request, nil
+	from, to, err := auditTimeRange(request.CreatedFrom, request.CreatedTo)
+	if err != nil {
+		return request, nil, nil, errors.New(errors.CodeInvalidParam)
+	}
+	return request, from, to, nil
 }
 
 // IntegrationOverview 查询外部集成交互总览。