Struct AuditQueryBuilder 

pub struct AuditQueryBuilder { /* private fields */ }

A fluent builder for AuditQuery.

Starts from the Default query (no filters, descending timestamp).

Example

use auth_framework::audit::*;
use std::time::{Duration, SystemTime};

let query = AuditQuery::builder()
    .event_types(vec![AuditEventType::LoginFailure])
    .limit(50)
    .build();

assert_eq!(query.limit, Some(50));

Implementations

impl AuditQueryBuilder

pub fn event_types(self, types: Vec<AuditEventType>) -> Self

Filter by event types.

pub fn user_id(self, id: impl Into<String>) -> Self

Filter by user ID.

pub fn risk_level(self, level: RiskLevel) -> Self

Filter by minimum risk level.

pub fn outcome(self, outcome: EventOutcome) -> Self

Filter by outcome.

pub fn time_range(self, start: SystemTime, end: SystemTime) -> Self

Filter by time range.

pub fn last_seconds(self, seconds: u64) -> Self

Convenience: filter to the last N seconds.

pub fn last_24h(self) -> Self

Convenience: filter to the last 24 hours.

pub fn ip_address(self, ip: impl Into<String>) -> Self

Filter by IP address.

pub fn resource_type(self, rt: impl Into<String>) -> Self

Filter by resource type.

pub fn actor_id(self, id: impl Into<String>) -> Self

Filter by actor ID.

pub fn correlation_id(self, id: impl Into<String>) -> Self

Filter by correlation ID.

pub fn limit(self, limit: u64) -> Self

Limit the number of results.

pub fn offset(self, offset: u64) -> Self

Set pagination offset.

pub fn sort_order(self, order: SortOrder) -> Self

Set the sort order.

pub fn build(self) -> AuditQuery

Consume the builder and produce the AuditQuery.