riotpiao-poimen/homelab-frontend
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(audit): log successful JWT auth with subject, acting_party, roles #21

Merged
rock merged 1 commits from feat/audit-trail into main 2026-09-09 22:38:02 +00:00
Conversation 0 Commits 1 Files Changed 2
+27 -9
rock commented 2026-09-09 19:34:26 +00:00
Owner
Copy Link
Copy Source

Add audit trail for authenticated API requests.

Changes

  • Add auth ok info log after JWT validation passes
  • Export ClaimString/ClaimStringSlice from identity package
  • Log fields: subject, acting_party, roles/permissions, path, method

Log format

{"level":"info","message":"auth ok","extra":{"subject":"2213aa...","acting_party":"portfolio-agent","roles":"llm:inference,memory:read","path":"/v1/chat/completions","method":"POST"}}

Why

Gateway only logged auth failures — no audit trail for who accessed LLM endpoints. Required for cluster access auditing.

Complements existing X-Forwarded-User header injection (already complete).

Add audit trail for authenticated API requests. ## Changes - Add `auth ok` info log after JWT validation passes - Export `ClaimString`/`ClaimStringSlice` from identity package - Log fields: subject, acting_party, roles/permissions, path, method ## Log format ```json {"level":"info","message":"auth ok","extra":{"subject":"2213aa...","acting_party":"portfolio-agent","roles":"llm:inference,memory:read","path":"/v1/chat/completions","method":"POST"}} ``` ## Why Gateway only logged auth failures — no audit trail for who accessed LLM endpoints. Required for cluster access auditing. Complements existing X-Forwarded-User header injection (already complete).
rock added 1 commit 2026-09-09 19:34:28 +00:00
feat(audit): log successful JWT auth with subject, acting_party, roles
CI / CI (pull_request) Successful in 3m24s
Details
2d6a7cce30 
- Add 'auth ok' info log after JWT validation passes
- Export ClaimString/ClaimStringSlice from identity package
- Log fields: subject, acting_party, roles/permissions, path, method
- Complements existing 'auth failed' error logs for full audit trail
rock merged commit e20e3f7be3 into main 2026-09-09 22:38:02 +00:00
rock deleted branch feat/audit-trail 2026-09-09 22:38:06 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
area/auth
Authentication & authorization
 area/authentik
Authentik OIDC provider config
 area/downstream
Downstream service changes
 area/gateway
API gateway code
 priority/high
Must have
 priority/low
Nice to have
 priority/medium
Should have
 status/blocked
Blocked by dependency
 status/done
Completed
 status/in-progress
Currently being worked on
 status/review
Ready for review
 status/todo
Not started
 type/docs
Documentation
 type/feature
New feature
 type/infra
Infrastructure change
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
poimen rock (Rock)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: riotpiao-poimen/homelab-frontend#21