Access logging

[fallow64]

Adds access logging to POST/PUT/PATCH/DELETE endpoints

Full list of changes:

• Modifies the access table to include payload, method, query_string and status
  • If payload is non-JSON, it will be stored as {"raw_body": "utf-8 string"}
  • Note: even non-users who attempt to perform an action are logged. This is easily changeable?
• Adds a /access_logs route and schema to access logs
• Removes commit_db_session middleware (FastAPI automatically commits when destroying async_session_maker, lead to funkiness with interacting with the session from a different middleware)
• Modifies the query parser to handle unix timestamps

Also the target of this PR is active_field just to display the changes made on top of that branch.

Resolves CHTC/chtc-user-ui#43

[fallow64]

Out of curiosity I'm gonna give copilot a review (note to self: don't ping it or else it will do work...)

[Copilot]

Pull request overview

Adds server-side access logging for state-changing HTTP requests and exposes an admin-only endpoint to query those logs, alongside a schema/migration update to persist richer request metadata and support unix-timestamp filtering.

Changes:

• Add HTTP middleware to log POST/PUT/PATCH/DELETE requests (method, route, query string, payload, status) into the access table.
• Introduce /access_logs admin route + AccessGet schema and add tests for access logging behavior.
• Update query parsing to cast datetime filters from unix timestamps; migrate access.payload to JSONB and add new columns.

Reviewed changes

Copilot reviewed 9 out of 9 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
userapp/main.py	Adds access-logging middleware that inserts Access rows after request handling.
userapp/core/models/tables.py	Expands Access model (method/query_string/status) and changes payload to JSONB.
alembic/versions/a095c68f3ad3_move_access_table_to_use_jsonb_for_.py	Migrates access table schema to match new logging fields.
userapp/api/routes/access.py	Adds /access_logs admin-only listing endpoint.
userapp/core/schemas/access.py	Adds response schema for access-log entries.
userapp/api/routes/init.py	Registers the new access router.
userapp/api/routes/security.py	Stores auth token data on request.state for middleware access.
userapp/query_parser.py	Adds unix-timestamp → datetime casting for filters.
userapp/api/tests/test_access_log.py	Adds tests validating logging behavior and access controls.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.