// Copyright 2024 RustFS Team // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. use crate::{AuditEntry, AuditResult, AuditSystem}; use rustfs_ecstore::config::Config; use std::sync::{Arc, OnceLock}; use tracing::{debug, error, trace, warn}; /// Global audit system instance static AUDIT_SYSTEM: OnceLock> = OnceLock::new(); /// Initialize the global audit system pub fn init_audit_system() -> Arc { AUDIT_SYSTEM.get_or_init(|| Arc::new(AuditSystem::new())).clone() } /// Get the global audit system instance pub fn audit_system() -> Option> { AUDIT_SYSTEM.get().cloned() } /// A helper macro for executing closures if the global audit system is initialized. /// If not initialized, log a warning and return `Ok(())`. macro_rules! with_audit_system { ($async_closure:expr) => { if let Some(system) = audit_system() { (async move { $async_closure(system).await }).await } else { warn!("Audit system not initialized, operation skipped."); Ok(()) } }; } /// Start the global audit system with configuration pub async fn start_audit_system(config: Config) -> AuditResult<()> { let system = init_audit_system(); system.start(config).await } /// Stop the global audit system pub async fn stop_audit_system() -> AuditResult<()> { with_audit_system!(|system: Arc| async move { system.close().await }) } /// Pause the global audit system pub async fn pause_audit_system() -> AuditResult<()> { with_audit_system!(|system: Arc| async move { system.pause().await }) } /// Resume the global audit system pub async fn resume_audit_system() -> AuditResult<()> { with_audit_system!(|system: Arc| async move { system.resume().await }) } /// Dispatch an audit log entry to all targets pub async fn dispatch_audit_log(entry: Arc) -> AuditResult<()> { if let Some(system) = audit_system() { if system.is_running().await { system.dispatch(entry).await } else { // The system is initialized but not running (for example, it is suspended). Silently discard log entries based on original logic. // For debugging purposes, it can be useful to add a trace log here. trace!("Audit system is not running, dropping audit entry."); Ok(()) } } else { // The system is not initialized at all. This is a more important state. // It might be better to return an error or log a warning. debug!("Audit system not initialized, dropping audit entry."); // If this should be a hard failure, you can return Err(AuditError::NotInitialized("...")) Ok(()) } } /// Reload the global audit system configuration pub async fn reload_audit_config(config: Config) -> AuditResult<()> { with_audit_system!(|system: Arc| async move { system.reload_config(config).await }) } /// Check if the global audit system is running pub async fn is_audit_system_running() -> bool { if let Some(system) = audit_system() { system.is_running().await } else { false } } /// AuditLogger singleton for easy access pub struct AuditLogger; impl AuditLogger { /// Log an audit entry pub async fn log(entry: AuditEntry) { if let Err(e) = dispatch_audit_log(Arc::new(entry)).await { error!(error = %e, "Failed to dispatch audit log entry"); } } /// Check if audit logging is enabled pub async fn is_enabled() -> bool { is_audit_system_running().await } /// Get singleton instance pub fn instance() -> &'static Self { static INSTANCE: AuditLogger = AuditLogger; &INSTANCE } }