@sliit-foss/mongoose-audit

A rework of the mongoose-audit-log package to support newer versions of mongoose and more flexible options

IMPORTANT - The behaviour of this is different from the original mongoose-audit-log package and cannot be considered as a drop in replacement for it.

It is a mongoose plugin to manage an audit log of changes to a MongoDB database.

Features

• Store changes to entities on persist (save, update, delete)
• Remember the user, that executed the change
• Log when the change has been done

Storing the current user

In order to collect the information about who actually did a change to an entity, the user information is required. This can be set on a per usage (1) or global (2) level:

1. Set the current user on an entity right before persisting:

1Order.findById(123)
2  .then((order) => {
3    order.__user = "me@test.de";
4    order.amount = 1000;
5  })
6  .save();

2. Set it as an option when registering the plugin:

1const { plugin } = require("@sliit-foss/mongoose-audit");
2
3SomeSchema.plugin(plugin, {
4  getUser: () => "user details from wherever you wish to get it"
5});

Query history

Please find below an example express route, to request the history of a given type and id:

1const { plugin, Audit } = require("@sliit-foss/mongoose-audit");
2
3router.get("/api/users/:id/history", (req, res, next) => {
4  Audit.find({ entity_id: req.params.id, entity: "User" })
5    .then((history) => res.json(history))
6    .catch(next);
7});

All supported plugin options

• getUser - () => any

  • The user extractor function to use. This probably will be fetching the current user from a context or something similar.

• types - AuditType[]

  • The types of audit to record.

• include - string[]

  • The fields to consider for the audit. Cannot be used along with exclude.

• exclude - string[]

  • The fields to exclude from the audit. Cannot be used along with include.

• onAudit - (audit) => Promise

  • Called before persisting the audit is saved. Use this to use your own audit model instead of the default one.

• background - boolean

  • By default audit logs are persisted asynchronously in the background. Change this to false if you want it to be synchronous.