chore(audit): date filtering for audit logs endpoint (#93470)

Author: cathteng

src/sentry/api/endpoints/organization_auditlogs.py

@@ -10,6 +10,7 @@
 from sentry.api.bases.organization import OrganizationAuditPermission
 from sentry.api.paginator import DateTimePaginator
 from sentry.api.serializers import serialize
+from sentry.api.utils import get_date_range_from_stats_period
 from sentry.audit_log.manager import AuditLogEventNotRegistered
 from sentry.db.models.fields.bounded import BoundedIntegerField
 from sentry.models.auditlogentry import AuditLogEntry
@@ -20,9 +21,11 @@
 
 
 class AuditLogQueryParamSerializer(serializers.Serializer):
-
     event = serializers.CharField(required=False)
     actor = serializers.IntegerField(required=False, max_value=BoundedIntegerField.MAX_VALUE)
+    start = serializers.DateTimeField(required=False)
+    end = serializers.DateTimeField(required=False)
+    statsPeriod = serializers.CharField(required=False)
 
     def validate_event(self, event):
         try:
@@ -65,6 +68,11 @@ def get(
             else:
                 queryset = queryset.filter(event=query["event"])
 
+        # Handle date filtering
+        start, end = get_date_range_from_stats_period(request.GET, optional=True)
+        if start and end:
+            queryset = queryset.filter(datetime__range=(start, end))
+
         response = self.paginate(
             request=request,
             queryset=queryset,

tests/sentry/api/endpoints/test_organization_auditlogs.py

@@ -196,3 +196,59 @@ def test_superuser_read_write_can_see_audit_logs(self):
 
         self.add_user_permission(superuser, "superuser.write")
         self.get_success_response(self.organization.slug)
+
+    def test_filter_by_date(self):
+        now = timezone.now()
+
+        entry1 = AuditLogEntry.objects.create(
+            organization_id=self.organization.id,
+            event=audit_log.get_event_id("ORG_EDIT"),
+            actor=self.user,
+            datetime=now - timedelta(days=1),
+        )
+        AuditLogEntry.objects.create(
+            organization_id=self.organization.id,
+            event=audit_log.get_event_id("ORG_ADD"),
+            actor=self.user,
+            datetime=now,
+        )
+
+        start_time = now - timedelta(days=1)
+        end_time = now - timedelta(hours=1)
+
+        response = self.get_success_response(
+            self.organization.slug,
+            qs_params={
+                "event": "org.edit",
+                "start": start_time.isoformat(),
+                "end": end_time.isoformat(),
+            },
+        )
+        assert len(response.data["rows"]) == 1
+        assert response.data["rows"][0]["id"] == str(entry1.id)
+
+    def test_filter_by_stats_period(self):
+        now = timezone.now()
+
+        # old entry
+        AuditLogEntry.objects.create(
+            organization_id=self.organization.id,
+            event=audit_log.get_event_id("ORG_EDIT"),
+            actor=self.user,
+            datetime=now - timedelta(days=2),
+        )
+
+        recent_entry = AuditLogEntry.objects.create(
+            organization_id=self.organization.id,
+            event=audit_log.get_event_id("ORG_ADD"),
+            actor=self.user,
+            datetime=now - timedelta(hours=12),
+        )
+
+        response = self.get_success_response(
+            self.organization.slug, qs_params={"statsPeriod": "1d"}
+        )
+
+        # Should only return the recent entry, not the old one
+        assert len(response.data["rows"]) == 1
+        assert response.data["rows"][0]["id"] == str(recent_entry.id)