9bfadd7344
88 occurrences of res.status(500).json({ error: e.message }) (or
err.message) swept to generic 'Request failed'. Server-side
console.error / logger.error calls are untouched, so the full detail
still lands in logs and Grafana.
Covers: admin, adminConfig, adminMilestones, chartReview, documents,
encounters, hospitalCourse, hpi, learningAdmin, learningAI, learningHub,
logs, memories, milestones, oidc, refine, sessions, sickVisit, soap,
userPreferences, wellVisit.
Also extends .gitignore to exclude .env.backup-* files.
63 lines
2.2 KiB
JavaScript
63 lines
2.2 KiB
JavaScript
var express = require('express');
|
|
var router = express.Router();
|
|
var { authMiddleware } = require('../middleware/auth');
|
|
var logger = require('../utils/logger');
|
|
|
|
router.get('/logs/usage', authMiddleware, async function(req, res) {
|
|
try {
|
|
var days = parseInt(req.query.days) || 30;
|
|
var summary = await logger.getUsageSummary(req.user.id, days);
|
|
res.json({ success: true, summary: summary, period: days + ' days' });
|
|
} catch (err) { res.status(500).json({ error: 'Request failed' }); }
|
|
});
|
|
|
|
router.get('/logs/audit', authMiddleware, async function(req, res) {
|
|
try {
|
|
var logs = await logger.getAuditLogs(req.user.id, parseInt(req.query.limit) || 50);
|
|
res.json({ success: true, logs: logs });
|
|
} catch (err) { res.status(500).json({ error: 'Request failed' }); }
|
|
});
|
|
|
|
router.get('/logs/api', authMiddleware, async function(req, res) {
|
|
try {
|
|
var logs = await logger.getApiLogs(req.user.id, parseInt(req.query.limit) || 50);
|
|
res.json({ success: true, logs: logs });
|
|
} catch (err) { res.status(500).json({ error: 'Request failed' }); }
|
|
});
|
|
|
|
router.get('/logs/access', authMiddleware, async function(req, res) {
|
|
try {
|
|
var logs = await logger.getAccessLogs(req.user.id, parseInt(req.query.limit) || 50);
|
|
res.json({ success: true, logs: logs });
|
|
} catch (err) { res.status(500).json({ error: 'Request failed' }); }
|
|
});
|
|
|
|
// Client-side error receiver — no auth required (sendBeacon can't send auth headers)
|
|
router.post('/logs/client-error', function(req, res) {
|
|
try {
|
|
var e = req.body || {};
|
|
console.error('[CLIENT ERROR]', JSON.stringify({
|
|
type: e.type,
|
|
message: e.message,
|
|
source: e.source,
|
|
line: e.line,
|
|
col: e.col,
|
|
stack: e.stack,
|
|
ip: req.ip,
|
|
ua: req.headers['user-agent'],
|
|
time: new Date().toISOString()
|
|
}));
|
|
res.status(204).end();
|
|
} catch(err) { res.status(204).end(); }
|
|
});
|
|
|
|
// Client-side event logging (copy, export — PHI access tracking)
|
|
router.post('/logs/client-event', authMiddleware, function(req, res) {
|
|
try {
|
|
var e = req.body || {};
|
|
logger.audit(req.user.id, e.action || 'client_event', e.target || '', req, { category: 'phi_access' });
|
|
res.status(204).end();
|
|
} catch(err) { res.status(204).end(); }
|
|
});
|
|
|
|
module.exports = router;
|