Skip to content

[Backend] — Auth Audit Event Logging #1638

Description

@Olowodarey

Problem
auth security-relevant actions (login, refresh, revoke, failed attempts) aren't consistently written to the audit-events table.

Requirements

  • Emit audit events for all auth-critical actions with actor, ip, and outcome.
  • Ensure failures are logged too (not only successes).
  • Tests: each auth action produces the expected audit record.

Acceptance Criteria

  • Auth actions are fully auditable. Covered by tests.

Files

  • backend/src/auth/auth.service.ts
  • backend/src/migrations/1777000100000-CreateAuthAuditEvents.ts
  • backend/src/auth/auth.controller.ts

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions