Add audit logging at the start of the script

Author: rragundez

src/scripts/__init__.py

@@ -1,3 +1,3 @@
 """To generate the SHA256 checksum run shasum -a 256 script.py."""
 
-CREATE_DEFAULT_SUPERUSER_CHECKSUM = "051463fc44db46b9a1a791530a8ab05ee2cdd6882613fddab839ceeaa20e1c98"
+CREATE_DEFAULT_SUPERUSER_CHECKSUM = "f9ede74987c9a774d3d836b2088b6a7fe6d9b2a845b8a7e54db97b0eb2c6dc74"

src/scripts/create_default_superuser.py

@@ -27,9 +27,13 @@
 from fastcrud.exceptions.http_exceptions import DuplicateValueException
 
 from . import CREATE_DEFAULT_SUPERUSER_CHECKSUM as EXPECTED_CHECKSUM
-from .utils import ScriptIntegrityError, verify_script_integrity
+from .utils import ScriptIntegrityError, get_audit_info, verify_script_integrity
 
-logger = logging.getLogger(os.path.basename(__file__))
+SCRIPT_PATH = os.path.abspath(__file__)
+SCRIPT_NAME = os.path.basename(__file__)
+logger = logging.getLogger(SCRIPT_NAME)
+audit_info = get_audit_info(SCRIPT_PATH)
+logger.warning(f"Script being run by: {json.dumps(audit_info, default=str, indent=2)}")
 
 # Do not change these default values, read the file docstrings for context
 DEFAULT_NAME = "Default Superuser"
@@ -38,7 +42,7 @@
 
 
 async def async_main(password: str):
-    logger.info(f"Running script {os.path.basename(__file__)}")
+    logger.info(f"Running script {SCRIPT_NAME}")
     logger.debug("Creating hashed password")
     hashed_password = get_password_hash(password)
     logger.debug("Preparing superuser data")
@@ -99,7 +103,7 @@ def main(password: str):
 
 if __name__ == "__main__":
     try:
-        verify_script_integrity(os.path.abspath(__file__), EXPECTED_CHECKSUM)
+        verify_script_integrity(SCRIPT_PATH, EXPECTED_CHECKSUM)
     except ScriptIntegrityError as e:
         logger.error(e)
         sys.exit(1)  # Exit with failure code

src/scripts/utils.py

@@ -1,3 +1,29 @@
+import datetime
+import getpass
+import os
+import socket
+
+
+def get_audit_info(script_name: str) -> dict:
+    """Returns a dictionary with audit details about the script execution environment."""
+    user = getpass.getuser()
+    hostname = socket.gethostname()
+    try:
+        ip = socket.gethostbyname(hostname)
+    except Exception:
+        ip = None
+    cwd = os.getcwd()
+    now = datetime.datetime.now().isoformat()
+    return {
+        "user": user,
+        "hostname": hostname,
+        "ip": ip,
+        "cwd": cwd,
+        "script": os.path.abspath(script_name),
+        "time": now,
+    }
+
+
 import hashlib