Initial Kaffeekasse SaaS restart

2026-06-15 17:13:38 +02:00
commit b08eb93547
54 changed files with 4617 additions and 0 deletions
@@ -0,0 +1,65 @@
+<?php
+
+namespace App\Services;
+
+use PDO;
+
+final class AuditService
+{
+    public function __construct(private readonly PDO $pdo)
+    {
+    }
+
+    public function log(
+        ?int $tenantId,
+        ?int $actorUserId,
+        string $action,
+        string $targetType,
+        ?int $targetId,
+        string $result,
+        array $meta = []
+    ): void {
+        $statement = $this->pdo->prepare(
+            'INSERT INTO audit_events (
+                tenant_id,
+                actor_user_id,
+                action,
+                target_type,
+                target_id,
+                result,
+                request_id,
+                ip_hash,
+                user_agent_hash,
+                meta_json
+            ) VALUES (
+                :tenant_id,
+                :actor_user_id,
+                :action,
+                :target_type,
+                :target_id,
+                :result,
+                :request_id,
+                :ip_hash,
+                :user_agent_hash,
+                :meta_json
+            )'
+        );
+
+        $ip = $_SERVER['REMOTE_ADDR'] ?? '';
+        $userAgent = $_SERVER['HTTP_USER_AGENT'] ?? '';
+        $requestId = $_SERVER['HTTP_X_REQUEST_ID'] ?? bin2hex(random_bytes(18));
+
+        $statement->execute([
+            'tenant_id' => $tenantId,
+            'actor_user_id' => $actorUserId,
+            'action' => $action,
+            'target_type' => $targetType,
+            'target_id' => $targetId,
+            'result' => $result,
+            'request_id' => substr($requestId, 0, 36),
+            'ip_hash' => $ip !== '' ? hash('sha256', $ip) : null,
+            'user_agent_hash' => $userAgent !== '' ? hash('sha256', $userAgent) : null,
+            'meta_json' => $meta !== [] ? json_encode($meta, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES) : null,
+        ]);
+    }
+}