1

src/Jiaowu.Api/Infrastructure/Middleware/AuditMiddleware.cs

@@ -0,0 +1,38 @@
+using System.Security.Claims;
+using Jiaowu.Api.Domain.System;
+using Jiaowu.Api.Infrastructure.Persistence;
+
+namespace Jiaowu.Api.Infrastructure.Middleware;
+
+public sealed class AuditMiddleware(RequestDelegate next)
+{
+    public async Task InvokeAsync(HttpContext context, AppDbContext db)
+    {
+        await next(context);
+
+        if (HttpMethods.IsGet(context.Request.Method) ||
+            context.Request.Path.StartsWithSegments("/swagger"))
+        {
+            return;
+        }
+
+        // A failed business write can leave invalid tracked entities in this request scope.
+        // Audit persistence must not retry those entities and replace the original response.
+        db.ChangeTracker.Clear();
+        db.AuditLogs.Add(new AuditLog
+        {
+            UserId = Guid.TryParse(
+                context.User.FindFirstValue(ClaimTypes.NameIdentifier),
+                out var userId)
+                ? userId
+                : null,
+            UserName = context.User.Identity?.Name,
+            Method = context.Request.Method,
+            Path = context.Request.Path,
+            StatusCode = context.Response.StatusCode,
+            IpAddress = context.Connection.RemoteIpAddress?.ToString()
+        });
+
+        await db.SaveChangesAsync(context.RequestAborted);
+    }
+}