// Copyright 2024 RustFS Team // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. use crate::{AuditEntry, AuditResult, AuditSystem}; use rustfs_ecstore::config::Config; use std::sync::{Arc, OnceLock}; use tracing::{error, warn}; /// Global audit system instance static AUDIT_SYSTEM: OnceLock> = OnceLock::new(); /// Initialize the global audit system pub fn init_audit_system() -> Arc { AUDIT_SYSTEM.get_or_init(|| Arc::new(AuditSystem::new())).clone() } /// Get the global audit system instance pub fn audit_system() -> Option> { AUDIT_SYSTEM.get().cloned() } /// Start the global audit system with configuration pub async fn start_audit_system(config: Config) -> AuditResult<()> { let system = init_audit_system(); system.start(config).await } /// Stop the global audit system pub async fn stop_audit_system() -> AuditResult<()> { if let Some(system) = audit_system() { system.close().await } else { warn!("Audit system not initialized, cannot stop"); Ok(()) } } /// Pause the global audit system pub async fn pause_audit_system() -> AuditResult<()> { if let Some(system) = audit_system() { system.pause().await } else { warn!("Audit system not initialized, cannot pause"); Ok(()) } } /// Resume the global audit system pub async fn resume_audit_system() -> AuditResult<()> { if let Some(system) = audit_system() { system.resume().await } else { warn!("Audit system not initialized, cannot resume"); Ok(()) } } /// Dispatch an audit log entry to all targets pub async fn dispatch_audit_log(entry: Arc) -> AuditResult<()> { if let Some(system) = audit_system() { if system.is_running().await { system.dispatch(entry).await } else { // System not running, just drop the log entry without error Ok(()) } } else { // System not initialized, just drop the log entry without error Ok(()) } } /// Reload the global audit system configuration pub async fn reload_audit_config(config: Config) -> AuditResult<()> { if let Some(system) = audit_system() { system.reload_config(config).await } else { warn!("Audit system not initialized, cannot reload config"); Ok(()) } } /// Check if the global audit system is running pub async fn is_audit_system_running() -> bool { if let Some(system) = audit_system() { system.is_running().await } else { false } } /// AuditLogger singleton for easy access pub struct AuditLogger; impl AuditLogger { /// Log an audit entry pub async fn log(entry: AuditEntry) { if let Err(e) = dispatch_audit_log(Arc::new(entry)).await { error!(error = %e, "Failed to dispatch audit log entry"); } } /// Check if audit logging is enabled pub async fn is_enabled() -> bool { is_audit_system_running().await } /// Get singleton instance pub fn instance() -> &'static Self { static INSTANCE: AuditLogger = AuditLogger; &INSTANCE } }