v1.1: Add CIDR subnet filtering and Agent filter in Devices page

backend/routes/dashboard/deviceLabeling/getMacDetails.js

@@ -0,0 +1,72 @@
+const { DeviceStat, Flow } = require('../../../models/Schemas');
+
+async function getMacDetailsHandler(req, res) {
+  try {
+    const isAuthorized = req.user?.role === 'SUPER_ADMIN' ||
+      req.user?.role === 'EXECUTIVE' ||
+      req.user?.role === 'TENANT_ADMIN' ||
+      req.user?.role === 'COMPANY_ADMIN' ||
+      req.user?.role === 'COMPANY_OPERATOR' ||
+      req.user?._originalRole === 'SUPER_ADMIN' ||
+      req.user?._originalRole === 'TENANT_ADMIN';
+
+    if (!isAuthorized) {
+      return res.status(403).json({ ok: false, error: 'Unauthorized: Access denied.' });
+    }
+
+    const { mac } = req.query;
+    if (!mac) return res.status(400).json({ ok: false, error: 'mac parameter required' });
+
+    // Enforce tenant site isolation
+    const query = { src_mac: mac };
+    const deviceQuery = { mac_address: mac };
+
+    const isGlobalUser = req.user?.role === 'SUPER_ADMIN' ||
+      req.user?.role === 'EXECUTIVE' ||
+      ((!req.user?.site_uuid || req.user?.site_uuid === 'default') && ['SOC_ANALYST', 'ENGINEER'].includes(req.user?.role)) ||
+      req.user?._originalRole === 'SUPER_ADMIN';
+
+    if (!isGlobalUser && req.user?.site_uuid) {
+      query.site_uuid = req.user.site_uuid;
+      deviceQuery.site_uuid = req.user.site_uuid;
+    }
+
+    // 1. Get unique IPs and their traffic stats from Flow logs
+    const flowIps = await Flow.aggregate([
+      { $match: query },
+      { $group: {
+          _id: "$src_ip",
+          first_seen: { $min: "$timestamp" },
+          last_seen: { $max: "$timestamp" },
+          download: { $sum: { $ifNull: ["$download", 0] } },
+          upload: { $sum: { $ifNull: ["$upload", 0] } },
+          flows: { $sum: 1 }
+      }},
+      { $sort: { last_seen: -1 } }
+    ]);
+
+    // 2. Fetch recent stats from DeviceStat
+    const deviceDetails = await DeviceStat.find(deviceQuery)
+      .sort({ timestamp: -1 })
+      .limit(10)
+      .lean();
+
+    res.json({
+      ok: true,
+      mac_address: mac,
+      ips: flowIps.map(item => ({
+        ip_address: item._id,
+        first_seen: item.first_seen,
+        last_seen: item.last_seen,
+        download: item.download || 0,
+        upload: item.upload || 0,
+        flows: item.flows || 0
+      })),
+      deviceDetails: deviceDetails
+    });
+  } catch (err) {
+    res.status(500).json({ ok: false, error: err.message });
+  }
+}
+
+module.exports = getMacDetailsHandler;