添加日志

mini-program/app/middleware/auth.py

@@ -1,4 +1,5 @@
 from collections.abc import Awaitable, Callable
+import logging
 
 from fastapi import FastAPI, HTTPException, Request
 from sqlalchemy import text
@@ -21,6 +22,8 @@ EXCLUDED_PATH_PREFIXES = (
     "/auth/login",
 )
 
+logger = logging.getLogger("app.auth")
+
 
 def _is_excluded_path(path: str) -> bool:
     for prefix in EXCLUDED_PATH_PREFIXES:
@@ -41,15 +44,42 @@ def install_auth_middleware(app: FastAPI) -> None:
 
         auth_header = request.headers.get("Authorization")
         if not auth_header:
+            logger.warning(
+                "auth failed: missing header",
+                extra={
+                    "event": "auth_check",
+                    "request_id": getattr(request.state, "request_id", None),
+                    "path": path,
+                    "reason": "missing_authorization_header",
+                },
+            )
             return auth_error_response("missing authorization header")
 
         parts = auth_header.split(" ", 1)
         if len(parts) != 2 or parts[0].lower() != "bearer":
+            logger.warning(
+                "auth failed: invalid header format",
+                extra={
+                    "event": "auth_check",
+                    "request_id": getattr(request.state, "request_id", None),
+                    "path": path,
+                    "reason": "invalid_authorization_format",
+                },
+            )
             return auth_error_response("invalid authorization format")
 
         try:
             user_id = decode_access_token(parts[1].strip())
         except HTTPException:
+            logger.warning(
+                "auth failed: invalid token",
+                extra={
+                    "event": "auth_check",
+                    "request_id": getattr(request.state, "request_id", None),
+                    "path": path,
+                    "reason": "invalid_or_expired_token",
+                },
+            )
             return auth_error_response("invalid or expired access token")
 
         with SessionLocal() as db:
@@ -69,6 +99,16 @@ def install_auth_middleware(app: FastAPI) -> None:
                 .first()
             )
             if not user_row or int(user_row["status"]) != 1:
+                logger.warning(
+                    "auth failed: user unavailable",
+                    extra={
+                        "event": "auth_check",
+                        "request_id": getattr(request.state, "request_id", None),
+                        "path": path,
+                        "user_id": user_id,
+                        "reason": "user_not_found_or_disabled",
+                    },
+                )
                 return auth_error_response("user not found or disabled")
 
         request.state.user_id = user_id

mini-program/app/middleware/request_log.py

@@ -0,0 +1,65 @@
+import logging
+import time
+import uuid
+from collections.abc import Awaitable, Callable
+
+from fastapi import FastAPI, Request
+from starlette.responses import Response
+
+
+logger = logging.getLogger("app.request")
+
+
+def install_request_logging_middleware(app: FastAPI) -> None:
+    @app.middleware("http")
+    async def request_logging_middleware(
+        request: Request,
+        call_next: Callable[[Request], Awaitable[Response]],
+    ) -> Response:
+        request_id = request.headers.get("X-Request-ID") or uuid.uuid4().hex
+        request.state.request_id = request_id
+        started_at = time.perf_counter()
+
+        try:
+            response = await call_next(request)
+        except Exception:
+            duration_ms = round((time.perf_counter() - started_at) * 1000, 2)
+            logger.exception(
+                "request failed",
+                extra={
+                    "event": "request",
+                    "request_id": request_id,
+                    "method": request.method,
+                    "path": request.url.path,
+                    "status_code": 500,
+                    "duration_ms": duration_ms,
+                    "client_ip": request.client.host if request.client else None,
+                    "user_id": getattr(request.state, "user_id", None),
+                },
+            )
+            raise
+
+        duration_ms = round((time.perf_counter() - started_at) * 1000, 2)
+        status_code = response.status_code
+        level = logging.INFO
+        if status_code >= 500:
+            level = logging.ERROR
+        elif status_code >= 400:
+            level = logging.WARNING
+
+        logger.log(
+            level,
+            "request completed",
+            extra={
+                "event": "request",
+                "request_id": request_id,
+                "method": request.method,
+                "path": request.url.path,
+                "status_code": status_code,
+                "duration_ms": duration_ms,
+                "client_ip": request.client.host if request.client else None,
+                "user_id": getattr(request.state, "user_id", None),
+            },
+        )
+        response.headers["X-Request-ID"] = request_id
+        return response