awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-07 13:27:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3319 from akhilmhdh/feat/oidc-claims-in-audit-log

Browse Source 
Added provider oidc claim in audit log event
This commit is contained in:
Akhil Mohan
2025-03-27 19:28:27 +05:30
committed by GitHub
parent 697543e4a2 6c0975554d
commit 8b53f63d69
3 changed files with 10 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/ee/services/audit-log/audit-log-types.ts
+1
View File
@@ -968,6 +968,7 @@ interface LoginIdentityOidcAuthEvent {
identityId: string; identityId: string;
identityOidcAuthId: string; identityOidcAuthId: string;
identityAccessTokenId: string; identityAccessTokenId: string;
oidcClaimsReceived: Record<string, unknown>;
}; };
} }
backend/src/server/routes/v1/identity-oidc-auth-router.ts
+8 -2
View File
@@ -32,6 +32,8 @@ const IdentityOidcAuthResponseSchema = IdentityOidcAuthsSchema.pick({
caCert: z.string() caCert: z.string()
}); });
const MAX_OIDC_CLAIM_SIZE = 32_768;
export const registerIdentityOidcAuthRouter = async (server: FastifyZodProvider) => { export const registerIdentityOidcAuthRouter = async (server: FastifyZodProvider) => {
server.route({ server.route({
method: "POST", method: "POST",
@@ -55,7 +57,7 @@ export const registerIdentityOidcAuthRouter = async (server: FastifyZodProvider)
} }
}, },
handler: async (req) => { handler: async (req) => {
const { identityOidcAuth, accessToken, identityAccessToken, identityMembershipOrg } = const { identityOidcAuth, accessToken, identityAccessToken, identityMembershipOrg, oidcTokenData } =
await server.services.identityOidcAuth.login({ await server.services.identityOidcAuth.login({
identityId: req.body.identityId, identityId: req.body.identityId,
jwt: req.body.jwt jwt: req.body.jwt
@@ -69,7 +71,11 @@ export const registerIdentityOidcAuthRouter = async (server: FastifyZodProvider)
metadata: { metadata: {
identityId: identityOidcAuth.identityId, identityId: identityOidcAuth.identityId,
identityAccessTokenId: identityAccessToken.id, identityAccessTokenId: identityAccessToken.id,
identityOidcAuthId: identityOidcAuth.id identityOidcAuthId: identityOidcAuth.id,
oidcClaimsReceived:
Buffer.from(JSON.stringify(oidcTokenData), "utf8").byteLength < MAX_OIDC_CLAIM_SIZE
? oidcTokenData
: { payload: "Error: Payload exceeds 32KB, provided oidc claim not recorded in audit log." }
} }
} }
}); });
backend/src/services/identity-oidc-auth/identity-oidc-auth-service.ts
+1 -1
View File
@@ -213,7 +213,7 @@ export const identityOidcAuthServiceFactory = ({
} }
); );
return { accessToken, identityOidcAuth, identityAccessToken, identityMembershipOrg }; return { accessToken, identityOidcAuth, identityAccessToken, identityMembershipOrg, oidcTokenData: tokenData };
}; };
const attachOidcAuth = async ({ const attachOidcAuth = async ({