[JIRA] (IDP-2039) Add audit logging to login flows
Scott Cantor (Jira)
jira at shibboleth.atlassian.net
Wed Nov 30 20:52:24 UTC 2022
Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on IDP-2039 ( https://shibboleth.atlassian.net/browse/IDP-2039?atlOrigin=eyJpIjoiZGY5Nzc4YTA3YmExNDM4MDhhOTQ0ZGMyMGI0ZGFkY2EiLCJwIjoiaiJ9 )
Re: Add audit logging to login flows ( https://shibboleth.atlassian.net/browse/IDP-2039?atlOrigin=eyJpIjoiZGY5Nzc4YTA3YmExNDM4MDhhOTQ0ZGMyMGI0ZGFkY2EiLCJwIjoiaiJ9 )
I tweaked some things in the audit log writer but as I dig into this more, I think it gets too messy to try and overload the existing AuditFormattingMap feature to carry these formatting keys and values, but I also think it’s badly overkill to reproduce all that for each login flow.
My inclination is to just use a property and default to wire in a single category and format string for a login flow, and not allow the crazy (and totally unused AFAIK) multiple format feature I built for the main log. We can eventually retrofit the DuoOIDC plugin to that limitation later.
I’m starting by getting some beans defined up in the authn.abstract flow layer if we can, and hopefully just “fill in” the details down in each login flow.
( https://shibboleth.atlassian.net/browse/IDP-2039#add-comment?atlOrigin=eyJpIjoiZGY5Nzc4YTA3YmExNDM4MDhhOTQ0ZGMyMGI0ZGFkY2EiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-2039#add-comment?atlOrigin=eyJpIjoiZGY5Nzc4YTA3YmExNDM4MDhhOTQ0ZGMyMGI0ZGFkY2EiLCJwIjoiaiJ9 )
Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100210- sha1:fb625d0 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20221130/1a93e4dc/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-3a8ebaa8-bae0-4305-b4c1-45363d188750
Type: image/png
Size: 302 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221130/1a93e4dc/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-796c2902-ca07-48ba-91dd-cc5c21a8daaa
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221130/1a93e4dc/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-b2586c49-709a-413c-8375-eaa0a3a473e4
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221130/1a93e4dc/attachment-0005.png>
More information about the commits
mailing list