feat(backend): Audit-Log-Abfrage (Modul 19)

AuditModule um GET /audit-log?entityType=&entityId= erweitert
(nur Administrator). Zusaetzlich Jest-E2E-Parallelitaet begrenzt
(maxWorkers: 4), um wiederkehrende Verbindungsengpaesse gegen
Postgres unter vielen parallelen Testsuiten zu vermeiden.

ApiCore-Backend/test/audit-log.e2e-spec.ts

@@ -0,0 +1,95 @@
+import { INestApplication } from '@nestjs/common';
+import * as bcrypt from 'bcryptjs';
+import request from 'supertest';
+import { App } from 'supertest/types';
+import { PrismaService } from '../src/prisma/prisma.service';
+import { createTestApp } from './utils/create-test-app';
+import { login } from './utils/api';
+
+interface AuditLogEntryBody {
+  entityType: string;
+  entityId: string;
+  action: string;
+}
+
+describe('Audit log (e2e)', () => {
+  let app: INestApplication<App>;
+  let prisma: PrismaService;
+  const adminEmail = `audit-e2e-admin-${Date.now()}@example.com`;
+  const beekeeperEmail = `audit-e2e-beekeeper-${Date.now()}@example.com`;
+  const password = 'SuperSecret123!';
+  let adminId: string;
+  let beekeeperId: string;
+  let adminToken: string;
+  let beekeeperToken: string;
+  let apiaryId: string;
+
+  beforeAll(async () => {
+    app = await createTestApp();
+    prisma = app.get(PrismaService);
+
+    const passwordHash = await bcrypt.hash(password, 12);
+    const admin = await prisma.user.create({
+      data: { email: adminEmail, passwordHash, name: 'Admin', role: 'ADMIN' },
+    });
+    adminId = admin.id;
+    const beekeeper = await prisma.user.create({
+      data: {
+        email: beekeeperEmail,
+        passwordHash,
+        name: 'Beekeeper',
+        role: 'BEEKEEPER',
+      },
+    });
+    beekeeperId = beekeeper.id;
+    adminToken = (await login(app, adminEmail, password)).accessToken;
+    beekeeperToken = (await login(app, beekeeperEmail, password)).accessToken;
+  });
+
+  afterAll(async () => {
+    if (apiaryId) {
+      await prisma.apiary.deleteMany({ where: { id: apiaryId } });
+    }
+    await prisma.auditLog.deleteMany({
+      where: { userId: { in: [adminId, beekeeperId] } },
+    });
+    await prisma.refreshToken.deleteMany({
+      where: { userId: { in: [adminId, beekeeperId] } },
+    });
+    await prisma.user.deleteMany({
+      where: { id: { in: [adminId, beekeeperId] } },
+    });
+    await app.close();
+  });
+
+  it('rejects the query for a non-admin user', () => {
+    return request(app.getHttpServer())
+      .get('/api/v1/audit-log')
+      .set('Authorization', `Bearer ${beekeeperToken}`)
+      .expect(403);
+  });
+
+  it('lets an ADMIN query the audit log for a created apiary', async () => {
+    const createResponse = await request(app.getHttpServer())
+      .post('/api/v1/apiaries')
+      .set('Authorization', `Bearer ${beekeeperToken}`)
+      .send({ name: `Stand ${Date.now()}` })
+      .expect(201);
+    const apiary = createResponse.body as { id: string };
+    apiaryId = apiary.id;
+
+    const response = await request(app.getHttpServer())
+      .get(`/api/v1/audit-log?entityType=Apiary&entityId=${apiaryId}`)
+      .set('Authorization', `Bearer ${adminToken}`)
+      .expect(200);
+    const entries = response.body as AuditLogEntryBody[];
+    expect(
+      entries.some(
+        (entry) =>
+          entry.entityType === 'Apiary' &&
+          entry.entityId === apiaryId &&
+          entry.action === 'CREATE',
+      ),
+    ).toBe(true);
+  });
+});