@inspire-platform/sails-hook-permissions/api/policies/AuditPolicy.js

Comprehensive user permissions and entitlements system for sails.js and Waterline. Supports user authentication with passport.js, role-based permissioning, object ownership, and row-level security.

var fnv = require('fnv-plus');
var _ = require('lodash');
var url = require('url');

module.exports = function (req, res, next) {
  var ipAddress = req.headers['x-forwarded-for'] || (req.connection && req.connection.remoteAddress);
  req.requestId = fnv.hash(new Date().valueOf() + ipAddress, 128).str();

  sails.models.requestlog.create({
    id: req.requestId,
    ipAddress: ipAddress,
    url: sanitizeRequestUrl(req),
    method: req.method,
    body: _.omit(req.body, 'password'),
    model: req.options.modelIdentity,
    user: (req.user || {}).id
  }).exec(_.identity);

  // persist RequestLog entry in the background; continue immediately
  next();
};

function sanitizeRequestUrl (req) {
  var requestUrl = url.format({
    protocol: req.protocol,
    host: req.hostname || sails.getHost(),
    pathname: req.originalUrl || req.url,
    query: req.query
  });

  return requestUrl.replace(/(password=).*?(&|$)/ig, '$1<hidden>$2');
}