Merge pull request #167 from QuCodeXClub/develop

Develop

Author: TusharSaini999

Backend/openapi/openapi.yaml

@@ -881,3 +881,63 @@ paths:
       responses:
         "200":
           description: Message marked as read
+  /admin/logs/activity:
+    get:
+      tags:
+        - Admin
+      summary: Get all admin activity logs
+      security:
+        - cookieAuth: []
+      parameters:
+        - name: page
+          in: query
+          schema:
+            type: integer
+            default: 1
+        - name: limit
+          in: query
+          schema:
+            type: integer
+            default: 50
+      responses:
+        "200":
+          description: Paginated list of activity logs
+    delete:
+      tags:
+        - Admin
+      summary: Clear all admin activity logs
+      security:
+        - cookieAuth: []
+      responses:
+        "200":
+          description: Activity logs cleared successfully
+  /admin/logs/access:
+    get:
+      tags:
+        - Admin
+      summary: Get all public access logs
+      security:
+        - cookieAuth: []
+      parameters:
+        - name: page
+          in: query
+          schema:
+            type: integer
+            default: 1
+        - name: limit
+          in: query
+          schema:
+            type: integer
+            default: 50
+      responses:
+        "200":
+          description: Paginated list of access logs
+    delete:
+      tags:
+        - Admin
+      summary: Clear all public access logs
+      security:
+        - cookieAuth: []
+      responses:
+        "200":
+          description: Access logs cleared successfully

Backend/src/controllers/boardingPass.controller.js

@@ -3,12 +3,13 @@ import { ApiError } from '../utils/ApiError.js';
 import { ApiResponse } from '../utils/ApiResponse.js';
 import { asyncHandler } from '../utils/asyncHandler.js';
 import { queueService } from '../services/queueService.js';
+import { logPublicEvent } from '../middlewares/log.middleware.js';
 
 const generateBulkBoardingPasses = asyncHandler(async (req, res) => {
   const { eventName, eventDescription, time, eventTime, venue, eventVenue, studentsStr } = req.body;
   const globalTime = (time || eventTime || '').toString().trim();
   const globalVenue = (venue || eventVenue || '').toString().trim();
-  
+
   if (!eventName || !eventDescription || !studentsStr) {
     throw new ApiError(400, 'Event Name, Event Description, and students data are required');
   }
@@ -67,6 +68,8 @@ const verifyBoardingPass = asyncHandler(async (req, res) => {
     throw new ApiError(404, 'Invalid Boarding Pass ID');
   }
 
+  await logPublicEvent(req, `Boarding pass verified: ${boardingPassId}`);
+
   return res.status(200).json(new ApiResponse(200, boardingPass, 'Boarding pass verified successfully'));
 });
 

Backend/src/controllers/certificate.controller.js

@@ -4,6 +4,7 @@ import { ApiResponse } from '../utils/ApiResponse.js';
 import { asyncHandler } from '../utils/asyncHandler.js';
 import { queueService } from '../services/queueService.js';
 import { uploadOnCloudinary } from '../utils/cloudinary.js';
+import { logPublicEvent } from '../middlewares/log.middleware.js';
 
 const generateBulkCertificates = asyncHandler(async (req, res) => {
   const { eventName, eventDate, coordinatorName, studentsStr, signatureImageUrl } = req.body;
@@ -75,6 +76,8 @@ const verifyCertificate = asyncHandler(async (req, res) => {
     throw new ApiError(404, 'Invalid Certificate ID');
   }
 
+  await logPublicEvent(req, `Certificate verified: ${certificateId}`);
+
   return res.status(200).json(new ApiResponse(200, certificate, 'Certificate verified successfully'));
 });
 

Backend/src/controllers/event.controller.js

@@ -9,6 +9,7 @@ import {
   updateOnCloudinary,
   getPublicIdFromUrl,
 } from "../utils/cloudinary.js";
+import { logPublicEvent } from "../middlewares/log.middleware.js";
 
 const parseDateSafe = (val, fieldName, isRequired = false) => {
   if (!val) {
@@ -128,6 +129,8 @@ const createEvent = asyncHandler(async (req, res) => {
     tags: parseTags(tags),
     coverImage: coverImage.url,
   });
+  
+  req.logAction = `Admin created event: ${event.eventName}`;
 
   return res
     .status(201)
@@ -249,6 +252,8 @@ const getEvents = asyncHandler(async (req, res) => {
 
   const totalPages = Math.ceil(total / limit) || 1;
 
+  await logPublicEvent(req, "Events page seen");
+
   return res.status(200).json(
     new ApiResponse(
       200,
@@ -281,6 +286,8 @@ const getEventById = asyncHandler(async (req, res) => {
     throw new ApiError(404, "Event not found");
   }
 
+  await logPublicEvent(req, `Event details seen: ${event.eventName}`);
+
   return res
     .status(200)
     .json(new ApiResponse(200, event, "Event fetched successfully"));
@@ -312,6 +319,8 @@ const deleteEvent = asyncHandler(async (req, res) => {
   }
 
   await event.deleteOne();
+  
+  req.logAction = `Admin deleted event: ${event.eventName}`;
 
   return res
     .status(200)
@@ -384,6 +393,8 @@ const updateEvent = asyncHandler(async (req, res) => {
   event.coverImage = newCoverImageUrl;
 
   await event.save();
+  
+  req.logAction = `Admin updated event: ${event.eventName}`;
 
   return res
     .status(200)

Backend/src/controllers/log.controller.js

@@ -0,0 +1,91 @@
+import { SystemLog } from "../models/log.model.js";
+import { asyncHandler } from "../utils/asyncHandler.js";
+import { ApiResponse } from "../utils/ApiResponse.js";
+
+// @desc    Get Admin Activity Logs
+// @route   GET /api/v1/admin/logs/activity
+// @access  Private (Admin)
+export const getActivityLogs = asyncHandler(async (req, res) => {
+  const page = parseInt(req.query.page) || 1;
+  const limit = parseInt(req.query.limit) || 50;
+  const skip = (page - 1) * limit;
+
+  const logs = await SystemLog.find({ type: 'ADMIN_ACTIVITY' })
+    .sort({ createdAt: -1 })
+    .skip(skip)
+    .limit(limit);
+
+  const totalLogs = await SystemLog.countDocuments({ type: 'ADMIN_ACTIVITY' });
+
+  res.status(200).json(
+    new ApiResponse(200, {
+      logs,
+      totalPages: Math.ceil(totalLogs / limit),
+      currentPage: page,
+      totalLogs
+    }, "Activity logs fetched successfully")
+  );
+});
+
+// @desc    Get Public Access Logs
+// @route   GET /api/v1/admin/logs/access
+// @access  Private (Admin)
+export const getAccessLogs = asyncHandler(async (req, res) => {
+  const page = parseInt(req.query.page) || 1;
+  const limit = parseInt(req.query.limit) || 50;
+  const skip = (page - 1) * limit;
+
+  const logs = await SystemLog.find({ type: 'PUBLIC_ACCESS' })
+    .sort({ createdAt: -1 })
+    .skip(skip)
+    .limit(limit);
+
+  const totalLogs = await SystemLog.countDocuments({ type: 'PUBLIC_ACCESS' });
+
+  res.status(200).json(
+    new ApiResponse(200, {
+      logs,
+      totalPages: Math.ceil(totalLogs / limit),
+      currentPage: page,
+      totalLogs
+    }, "Access logs fetched successfully")
+  );
+});
+
+// @desc    Clear Admin Activity Logs
+// @route   DELETE /api/v1/admin/logs/activity
+// @access  Private (Admin)
+export const clearActivityLogs = asyncHandler(async (req, res) => {
+  await SystemLog.deleteMany({ type: 'ADMIN_ACTIVITY' });
+  
+  if (req.admin) {
+    await SystemLog.create({
+      type: 'ADMIN_ACTIVITY',
+      adminId: req.admin._id,
+      adminName: req.admin.name || 'Admin',
+      action: 'Cleared all admin activity logs',
+      details: { ip: req.ip || req.headers['x-forwarded-for'] || req.connection?.remoteAddress }
+    });
+  }
+
+  res.status(200).json(new ApiResponse(200, null, "Activity logs cleared successfully"));
+});
+
+// @desc    Clear Public Access Logs
+// @route   DELETE /api/v1/admin/logs/access
+// @access  Private (Admin)
+export const clearAccessLogs = asyncHandler(async (req, res) => {
+  await SystemLog.deleteMany({ type: 'PUBLIC_ACCESS' });
+  
+  if (req.admin) {
+    await SystemLog.create({
+      type: 'ADMIN_ACTIVITY',
+      adminId: req.admin._id,
+      adminName: req.admin.name || 'Admin',
+      action: 'Cleared all public access logs',
+      details: { ip: req.ip || req.headers['x-forwarded-for'] || req.connection?.remoteAddress }
+    });
+  }
+
+  res.status(200).json(new ApiResponse(200, null, "Access logs cleared successfully"));
+});

Backend/src/controllers/registration.controller.js

@@ -137,6 +137,8 @@ const updateRegistrationStatus = asyncHandler(async (req, res) => {
     registration.rejectionReason = finalReason;
   }
   await registration.save();
+  
+  req.logAction = `Admin updated registration status to ${status} for Student ID: ${registration.studentId}`;
 
   // Send email notification
   if (status === 'APPROVED') {
@@ -242,6 +244,8 @@ const updateRegistrationDetails = asyncHandler(async (req, res) => {
   }
 
   await registration.save();
+  
+  req.logAction = `Admin updated registration details for Student ID: ${registration.studentId}`;
 
   return res
     .status(200)
@@ -425,10 +429,16 @@ const bulkRegistration = asyncHandler(async (req, res) => {
     });
 });
 
+const logExport = asyncHandler(async (req, res) => {
+  req.logAction = `Admin exported registrations list`;
+  return res.status(200).json(new ApiResponse(200, null, "Export logged successfully"));
+});
+
 export {
   getAllRegistrations,
   updateRegistrationStatus,
   updateRegistrationDetails,
   addManualRegistration,
   bulkRegistration,
+  logExport,
 };

Backend/src/controllers/student.controller.js

@@ -4,6 +4,7 @@ import { ApiError } from '../utils/ApiError.js';
 import { ApiResponse } from '../utils/ApiResponse.js';
 import { asyncHandler } from '../utils/asyncHandler.js';
 import { verifyTurnstileToken } from '../utils/turnstile.js';
+import { logPublicEvent } from '../middlewares/log.middleware.js';
 
 export const getRegistrationStatusHelper = async () => {
   let setting = await SystemSetting.findOne({ key: 'registration' });
@@ -113,6 +114,8 @@ const registerStudent = asyncHandler(async (req, res) => {
       phone: phone.trim(),
       transactionId: transactionId.trim(),
     });
+    
+    await logPublicEvent(req, "Student registration submitted");
 
     return res.status(201).json(
       new ApiResponse(201, registration, 'Registration submitted successfully. Please wait for admin approval.')

Backend/src/controllers/team.controller.js

@@ -3,6 +3,7 @@ import { ApiError } from '../utils/ApiError.js';
 import { ApiResponse } from '../utils/ApiResponse.js';
 import { asyncHandler } from '../utils/asyncHandler.js';
 import { uploadOnCloudinary, deleteFromCloudinary, updateOnCloudinary, getPublicIdFromUrl } from '../utils/cloudinary.js';
+import { logPublicEvent } from '../middlewares/log.middleware.js';
 
 const addTeamMember = asyncHandler(async (req, res) => {
   const { academicYear, subTeam, name, post, sequenceNumber, email } = req.body;
@@ -32,6 +33,9 @@ const addTeamMember = asyncHandler(async (req, res) => {
     sequenceNumber: sequenceNumber ? Number(sequenceNumber) : 0,
     photo: photo.url,
   });
+  
+  req.logAction = `Admin added a team member: ${member.name} (${member.post})`;
+  
   return res.status(201).json(new ApiResponse(201, member, 'Team member added successfully'));
 });
 const getTeamMembers = asyncHandler(async (req, res) => {
@@ -42,6 +46,8 @@ const getTeamMembers = asyncHandler(async (req, res) => {
 
   const members = await TeamMember.find(query).select('-email').sort({ subTeam: 1, sequenceNumber: 1 });
 
+  await logPublicEvent(req, "Team page seen");
+
   return res.status(200).json(new ApiResponse(200, members, 'Team members fetched successfully'));
 });
 
@@ -58,6 +64,8 @@ const deleteTeamMember = asyncHandler(async (req, res) => {
 
   await deleteFromCloudinary(publicId);
   await member.deleteOne();
+  
+  req.logAction = `Admin deleted team member: ${member.name}`;
 
   return res.status(200).json(new ApiResponse(200, {}, 'Team member deleted successfully'));
 });
@@ -91,6 +99,9 @@ const updateTeamMember = asyncHandler(async (req, res) => {
   member.sequenceNumber = sequenceNumber !== undefined ? Number(sequenceNumber) : member.sequenceNumber;
   member.photo = newPhotoUrl;
   await member.save();
+  
+  req.logAction = `Admin updated team member: ${member.name}`;
+  
   return res.status(200).json(new ApiResponse(200, member, 'Team member updated successfully'));
 });