mirror of
https://github.com/trustgraph-ai/trustgraph.git
synced 2026-07-09 13:22:10 +02:00
d5f3b6d9f6
Add a complete audit event pipeline that emits structured, machine- parseable events for every gateway request and IAM decision. Schema and publisher: - AuditEvent dataclass and notify-class queue (audit_events_queue) - AuditPublisher utility: fire-and-forget emission with envelope (schema_version, event_id, event_type, timestamp, producer) - New request_id and client_ip fields on IamRequest for correlation Gateway (gateway.request events): - aiohttp middleware assigns request_id, captures timing/status/sizes and emits an event after every HTTP request completes - IamAuth.authenticate annotates the request with identity - Main endpoint handlers annotate capability and workspace - request_id and client_ip forwarded to IAM on authenticate/authorise IAM service (iam.authenticate, iam.authorise, iam.management events): - Emits iam.authenticate for resolve-api-key, login, anonymous auth - Emits iam.authorise for authorise and authorise-many decisions - Emits iam.management for user/workspace/key mutations - All events include request_id for correlation with gateway events Design: events land on a pub/sub notify topic — non-persistent, per-subscriber delivery. If no audit consumer is deployed, events are silently discarded. Storage, retention, and alerting are consumer-side concerns outside this boundary. Added unit tests for the publisher and gateway middleware, unit tests for IAM audit emission, and a contract test for the AuditEvent schema. Tech spec: docs/tech-specs/audit-events.md |
||
|---|---|---|
| .. | ||
| test_audit_middleware.py | ||
| test_auth.py | ||
| test_capabilities.py | ||
| test_config_receiver.py | ||
| test_core_import_export_roundtrip.py | ||
| test_dispatch_config.py | ||
| test_dispatch_manager.py | ||
| test_dispatch_mux.py | ||
| test_dispatch_requestor.py | ||
| test_dispatch_sender.py | ||
| test_dispatch_serialize.py | ||
| test_endpoint_constant.py | ||
| test_endpoint_i18n.py | ||
| test_endpoint_manager.py | ||
| test_endpoint_metrics.py | ||
| test_endpoint_socket.py | ||
| test_endpoint_stream.py | ||
| test_endpoint_variable.py | ||
| test_entity_contexts_import_dispatcher.py | ||
| test_explain_triples.py | ||
| test_graph_embeddings_import_dispatcher.py | ||
| test_rows_import_dispatcher.py | ||
| test_running.py | ||
| test_service.py | ||
| test_socket_graceful_shutdown.py | ||
| test_streaming_translators.py | ||
| test_text_document_translator.py | ||