feat: opt-in structured access-audit logging - #62

Open

alexluft wants to merge 23 commits into

mainfrom

feat/access-audit-log

Commits on Sep 26, 2026

feat: opt-in structured access-audit logging

authored and
alexluft
committed
c253bb9
refactor: use chrono for audit timestamps (review feedback)

authored and
alexluft
committed
59f71df
docs(audit): use generic values in the module example

alexluft
and
claude
committed
9df67ab
fix(audit): read identity from the proxy's forwarded request headers

alexluft
and
claude
committed
36f1fa1
fix(audit): never answer a request from the audit layer

alexluft
and
claude
committed
62876c3
feat(audit): record the end user named by a trusted relay

alexluft
and
claude
committed
a30c9bd
feat(audit): record X-Request-Id for correlation

alexluft
and
claude
committed
48fa31c
fix(dimse): log the C-MOVE study UID only when auditing is enabled

alexluft
and
claude
committed
9186736
docs: document the access-audit configuration

alexluft
and
claude
committed
a8d97b0
test(audit): a relay's on-behalf-of value is JSON-escaped data

alexluft
and
claude
committed
7322a9a
fix(logging): keep honouring NO_COLOR on terminals

alexluft
and
claude
committed
0bbca9b
fix(audit): accept UTF-8 identities, reject malformed ones whole

alexluft
and
claude
committed
4ee14cb
fix(config): refuse credential headers as audit identity headers

alexluft
and
claude
committed
f18128d
fix(audit): bound the size of values copied from the request

alexluft
and
claude
committed
f6191cf
fix(audit): write records from a dedicated thread, flush on shutdown

alexluft
and
claude
committed
72ae19c
fix(dimse): escape the C-MOVE study UID in the log line

alexluft
and
claude
committed
aca91aa
test(audit): cover custom user headers, absent claims and timeouts

alexluft
and
claude
committed
6595738
test(audit): pin the audit wiring through the real binary

alexluft
and
claude
committed
d300baf
docs(audit): state the trust model and the record's limits precisely

alexluft
and
claude
committed
bae8455
fix(audit): keep capped values within their cap, cap DICOM coordinates

alexluft
and
claude
committed
1c5434a
fix(config): refuse X-Forwarded-Access-Token as an audit identity header

alexluft
and
claude
committed
cd93b04
fix(logging): with auditing on, a log message cannot span lines

alexluft
and
claude
committed
9ccc500
test(logging): pin one write per event; bounded below the marker size

alexluft
and
claude
committed
95b931f

Navigation Menu

feat: opt-in structured access-audit logging - #62

feat: opt-in structured access-audit logging#62
alexluft wants to merge 23 commits into
mainfrom
feat/access-audit-log

Commits on Sep 26, 2026

feat: opt-in structured access-audit logging

refactor: use chrono for audit timestamps (review feedback)

docs(audit): use generic values in the module example

fix(audit): read identity from the proxy's forwarded request headers

fix(audit): never answer a request from the audit layer

feat(audit): record the end user named by a trusted relay

feat(audit): record X-Request-Id for correlation

fix(dimse): log the C-MOVE study UID only when auditing is enabled

docs: document the access-audit configuration

test(audit): a relay's on-behalf-of value is JSON-escaped data

fix(logging): keep honouring NO_COLOR on terminals

fix(audit): accept UTF-8 identities, reject malformed ones whole

fix(config): refuse credential headers as audit identity headers

fix(audit): bound the size of values copied from the request

fix(audit): write records from a dedicated thread, flush on shutdown

fix(dimse): escape the C-MOVE study UID in the log line

test(audit): cover custom user headers, absent claims and timeouts

test(audit): pin the audit wiring through the real binary

docs(audit): state the trust model and the record's limits precisely

fix(audit): keep capped values within their cap, cap DICOM coordinates

fix(config): refuse X-Forwarded-Access-Token as an audit identity header

fix(logging): with auditing on, a log message cannot span lines

test(logging): pin one write per event; bounded below the marker size