审计日志中的AOP

审计跟踪（也称为审核日志）是一个安全相关的时间顺序记录，记录这些记录的目的是为已经影响在任何时候的详细操作，提供程序运行的证明文件记录、源或事件

MVC

自定义一个过滤器

public class AuditFilter : IActionFilter

{

    /// <summary>

    ///     在执行操作方法后调用。

    /// </summary>

    /// <param name="filterContext"></param>

    public void OnActionExecuted(ActionExecutedContext filterContext)

    {

        var auditData = AbpAuditFilterData.GetOrNull(filterContext.HttpContext);

        if (auditData == null)

            return;

        auditData.Stopwatch.Stop();

        var path = AppDomain.CurrentDomain.BaseDirectory + "log.txt";

        if (filterContext.Exception != null)

            File.AppendAllText(path,

                DateTime.Now.ToString("yyyy-MM-dd HH:mm:ss") + "异常：" + filterContext.Exception + "\r\n");

        else

            File.AppendAllText(path,

                DateTime.Now.ToString("yyyy-MM-dd HH:mm:ss") + "耗时：" +

                Convert.ToInt32(auditData.Stopwatch.Elapsed.TotalMilliseconds) + "\r\n");

    }

    /// <summary>

    ///     在执行操作方法之前调用。

    /// </summary>

    /// <param name="filterContext"></param>

    public void OnActionExecuting(ActionExecutingContext filterContext)

    {

        var actionStopwatch = Stopwatch.StartNew();

        AbpAuditFilterData.Set(

            filterContext.HttpContext,

            new AbpAuditFilterData(actionStopwatch)

        );

    }

}

定义一个数据存储

public class AbpAuditFilterData

{

    private const string AbpAuditFilterDataHttpContextKey = "__AbpAuditFilterData";

    public AbpAuditFilterData(

        Stopwatch stopwatch)

    {

        Stopwatch = stopwatch;

    }

    public Stopwatch Stopwatch { get; }

    public static void Set(HttpContextBase httpContext, AbpAuditFilterData auditFilterData)

    {

        GetAuditDataStack(httpContext).Push(auditFilterData);

    }

    public static AbpAuditFilterData GetOrNull(HttpContextBase httpContext)

    {

        var stack = GetAuditDataStack(httpContext);

        return stack.Count <= 0

            ? null

            : stack.Pop();

    }

    /// <summary>

    ///     获取一个可变大小的后进先出 (LIFO) 集合

    /// </summary>

    /// <param name="httpContext"></param>

    /// <returns></returns>

    private static Stack<AbpAuditFilterData> GetAuditDataStack(HttpContextBase httpContext)

    {

        if (httpContext.Items[AbpAuditFilterDataHttpContextKey] is Stack<AbpAuditFilterData> stack)

            return stack;

        stack = new Stack<AbpAuditFilterData>();

        httpContext.Items[AbpAuditFilterDataHttpContextKey] = stack;

        return stack;

    }

}

HomeController 如下

public class HomeController : Controller

{

    public ActionResult Index()

    {

        var a = 0;

        for (var i = 0; i < 10000; i++)

            for (var j = 0; j < 10000; j++)

                a = i - j;

        ViewBag.A = a;

        return View();

    }

    public ActionResult About()

    {

        var a = Convert.ToInt32("a");

        ViewBag.Message = "Your application description page.";

        return View();

    }

}

访问home/index 日志记录如下：

2018-01-22 19:11:09耗时：342

访问home/about 日志记录如下：

Web Api

自定义过滤器

public class AuditFilter : IActionFilter

{

    //

    // 摘要:

    //     获取或设置一个值，该值指示是否可以为单个程序元素指定多个已指示特性的实例。

    //

    // 返回结果:

    //     如果可以指定多个实例，则为 true；否则为 false。默认值为 false。

    public bool AllowMultiple => false;

    /// <summary>

    /// 异步执行筛选器操作

    /// </summary>

    /// <param name="actionContext"></param>

    /// <param name="cancellationToken"></param>

    /// <param name="continuation"></param>

    /// <returns></returns>

    public async Task<HttpResponseMessage> ExecuteActionFilterAsync(HttpActionContext actionContext, CancellationToken cancellationToken, Func<Task<HttpResponseMessage>> continuation)

    {

        var method = actionContext.ActionDescriptor is ReflectedHttpActionDescriptor descriptor ? descriptor.MethodInfo : null;

        var str = $"{actionContext.ActionDescriptor.ControllerDescriptor.ControllerType.Name}/{method?.Name}/{JsonConvert.SerializeObject(actionContext.ActionArguments)}";

        var stopwatch = Stopwatch.StartNew();

        var path = AppDomain.CurrentDomain.BaseDirectory + "log.txt";

        try

        {

            return await continuation();

        }

        catch (Exception ex)

        {

            File.AppendAllText(path,

                DateTime.Now.ToString("yyyy-MM-dd HH:mm:ss") + " " + str + "异常：" + ex + "\r\n");

            throw;

        }

        finally

        {

            stopwatch.Stop();

            File.AppendAllText(path,

                DateTime.Now.ToString("yyyy-MM-dd HH:mm:ss") + " " + str + "耗时：" +

                Convert.ToInt32(stopwatch.Elapsed.TotalMilliseconds) + "\r\n");

        }

    }

}

ValuesController代码如下

public class ValuesController : ApiController

{

    // GET api/values

    public IEnumerable<string> Get()

    {

        Thread.Sleep(new Random().Next(500, 1000));

        return new[] { "Get" };

    }

    // GET api/values/5

    public string Get(int id)

    {

        Thread.Sleep(new Random().Next(500, 1000));

        return id + "";

    }

    [Route("api/values/GetError")]

    public void GetError()

    {

        var a = Convert.ToInt32("a");

    }

}

访问api/values 日志记录如下

2018-01-22 19:23:27 ValuesController/Get/{}耗时：978

访问api/values/1 日志记录如下

2018-01-22 19:24:21 ValuesController/Get/{"id":1}耗时：727

访问api/values/GetError 日志记录如下

Unity

自定义一个拦截器

[AttributeUsage(AttributeTargets.Method | AttributeTargets.Class | AttributeTargets.Interface)]

public class UnityAopAttribute : HandlerAttribute, ICallHandler

{

    public override ICallHandler CreateHandler(IUnityContainer container)

    {

        return this;

    }

    public IMethodReturn Invoke(IMethodInvocation input, GetNextHandlerDelegate getNext)

    {

        var s = new Stopwatch();

        s.Start();

        var result = getNext()(input, getNext);

        if (result.Exception != null)

        {

            WriteLog(result.Exception.ToString());

            //表示处理异常 Unity就不会抛出

            result.Exception = null;

        }

        s.Stop();

        WriteLog("方法：{0},参数：{1},耗时：{2}",

            input.MethodBase.Name, JsonConvert.SerializeObject(input.Arguments), s.Elapsed.TotalMilliseconds);

        return result;

    }

    private void WriteLog(string format, params object[] arg)

    {

        var path = AppDomain.CurrentDomain.BaseDirectory + "log.txt";

        File.AppendAllText(path, string.Format(format, arg) + "\r\n");

    }

    public IEnumerable<Type> GetRequiredInterfaces()

    {

        return Type.EmptyTypes;

    }

    public bool WillExecute => false;

}

接口定义如下

public interface IOrderService

{

    string GetOrder();

    string GetOrderDetail();

}

实现如下

加上UnityAop标记

[UnityAop]

public class OrderService : IOrderService

{

    public string GetOrder()

    {

        Thread.Sleep(new Random().Next(500, 1000));

        return "GetOrder";

    }

    public string GetOrderDetail()

    {

        var i = Convert.ToInt32("a");

        return i + "GetOrder";

    }

}

注入及调用如下

示例代码：https://github.com/sunven/Abp1

Reference

Unity AOP 处理异常的方法

巴特西

审计日志中的AOP

MVC

Web Api

Unity

Reference

最新文章

热门文章