Problem
auth security-relevant actions (login, refresh, revoke, failed attempts) aren't consistently written to the audit-events table.
Requirements
- Emit audit events for all auth-critical actions with actor, ip, and outcome.
- Ensure failures are logged too (not only successes).
- Tests: each auth action produces the expected audit record.
Acceptance Criteria
- Auth actions are fully auditable. Covered by tests.
Files
backend/src/auth/auth.service.ts
backend/src/migrations/1777000100000-CreateAuthAuditEvents.ts
backend/src/auth/auth.controller.ts
Problem
authsecurity-relevant actions (login, refresh, revoke, failed attempts) aren't consistently written to the audit-events table.Requirements
Acceptance Criteria
Files
backend/src/auth/auth.service.tsbackend/src/migrations/1777000100000-CreateAuthAuditEvents.tsbackend/src/auth/auth.controller.ts