awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-09-22 13:39:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add audit logs to project ssh config endpoints

Browse Source
This commit is contained in:
Tuan Dang
2025-04-17 23:00:46 -07:00
parent 796f5510ca
commit c6cd3a8cc0
2 changed files with 49 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
backend/src/ee/services/audit-log/audit-log-types.ts
View File

@@ -248,6 +248,8 @@ export enum EventType {
DELETE_SLACK_INTEGRATION = "delete-slack-integration", DELETE_SLACK_INTEGRATION = "delete-slack-integration",
GET_PROJECT_SLACK_CONFIG = "get-project-slack-config", GET_PROJECT_SLACK_CONFIG = "get-project-slack-config",
UPDATE_PROJECT_SLACK_CONFIG = "update-project-slack-config", UPDATE_PROJECT_SLACK_CONFIG = "update-project-slack-config",
GET_PROJECT_SSH_CONFIG = "get-project-ssh-config",
UPDATE_PROJECT_SSH_CONFIG = "update-project-ssh-config",
INTEGRATION_SYNCED = "integration-synced", INTEGRATION_SYNCED = "integration-synced",
CREATE_CMEK = "create-cmek", CREATE_CMEK = "create-cmek",
UPDATE_CMEK = "update-cmek", UPDATE_CMEK = "update-cmek",
@@ -1986,6 +1988,25 @@ interface GetProjectSlackConfig {
id: string; id: string;
}; };
} }
interface GetProjectSshConfig {
type: EventType.GET_PROJECT_SSH_CONFIG;
metadata: {
id: string;
projectId: string;
};
}
interface UpdateProjectSshConfig {
type: EventType.UPDATE_PROJECT_SSH_CONFIG;
metadata: {
id: string;
projectId: string;
defaultUserSshCaId?: string | null;
defaultHostSshCaId?: string | null;
};
}
interface IntegrationSyncedEvent { interface IntegrationSyncedEvent {
type: EventType.INTEGRATION_SYNCED; type: EventType.INTEGRATION_SYNCED;
metadata: { metadata: {
@@ -2670,6 +2691,8 @@ export type Event =
| GetSlackIntegration | GetSlackIntegration
| UpdateProjectSlackConfig | UpdateProjectSlackConfig
| GetProjectSlackConfig | GetProjectSlackConfig
| GetProjectSshConfig
| UpdateProjectSshConfig
| IntegrationSyncedEvent | IntegrationSyncedEvent
| CreateCmekEvent | CreateCmekEvent
| UpdateCmekEvent | UpdateCmekEvent

28
backend/src/server/routes/v1/project-router.ts
View File

@@ -644,7 +644,17 @@ export const registerProjectRouter = async (server: FastifyZodProvider) => {
projectId: req.params.workspaceId projectId: req.params.workspaceId
}); });
// TODO: consider adding audit logs await server.services.auditLog.createAuditLog({
...req.auditLogInfo,
projectId: sshConfig.projectId,
event: {
type: EventType.GET_PROJECT_SSH_CONFIG,
metadata: {
id: sshConfig.id,
projectId: sshConfig.projectId
}
}
});
return sshConfig; return sshConfig;
} }
@@ -654,7 +664,7 @@ export const registerProjectRouter = async (server: FastifyZodProvider) => {
method: "PATCH", method: "PATCH",
url: "/:workspaceId/ssh-config", url: "/:workspaceId/ssh-config",
config: { config: {
rateLimit: readLimit rateLimit: writeLimit
}, },
schema: { schema: {
params: z.object({ params: z.object({
@@ -686,6 +696,20 @@ export const registerProjectRouter = async (server: FastifyZodProvider) => {
...req.body ...req.body
}); });
await server.services.auditLog.createAuditLog({
...req.auditLogInfo,
projectId: sshConfig.projectId,
event: {
type: EventType.UPDATE_PROJECT_SSH_CONFIG,
metadata: {
id: sshConfig.id,
projectId: sshConfig.projectId,
defaultUserSshCaId: sshConfig.defaultUserSshCaId,
defaultHostSshCaId: sshConfig.defaultHostSshCaId
}
}
});
return sshConfig; return sshConfig;
} }
}); });