feat: Implement audit logging and rate limiting middleware with SurrealDB integration

- Added audit logging middleware to track admin actions and save logs to SurrealDB.
- Introduced rate limiting middleware for public endpoints and authentication endpoints.
- Enhanced security headers middleware with nonce generation for CSP in development.
- Created utility functions for extracting real client IP addresses from headers.
- Updated Cargo.toml and Cargo.lock to include new dependencies.
- Added new schemas for audit logs and rate limiting in the entities module.
- Refactored permissions middleware to support new permission checks.
This commit is contained in:
MythEclipse
2025-10-12 01:54:34 +07:00
parent b6b5f48055
commit 6f596efadd
13 changed files with 732 additions and 111 deletions
+3 -2
View File
@@ -6,6 +6,7 @@ pub mod security_headers_middleware;
pub use auth_middleware::auth_middleware;
pub use cors_middleware::cors_middleware;
pub use permissions_middleware::PermissionsMiddlewareLayer;
pub use rate_limiting_middleware::auth_rate_limiting_middleware;
pub use permissions_middleware::{PermissionsMiddlewareLayer, check_permissions};
// pub use audit_logging_middleware::{audit_logging_middleware, detailed_audit_logging_middleware};
pub use rate_limiting_middleware::{auth_rate_limiting_middleware, rate_limiting_middleware};
pub use security_headers_middleware::security_headers_middleware;