mirror of
https://github.com/warmbly/warmbly.git
synced 2026-08-20 08:01:26 +00:00
Matthew Meszaros
126114b34f
The new admin endpoints for SSH worker management, AWS credentials, worker profiles, releases, and system operations bypassed the existing audit-logging pattern. Now every mutating action records a row in the audit log with adminID, IP, user-agent, and operation-specific metadata (never secret values — for credential updates we record which fields were rotated, not what they became). New action constants: test, install, restart, upgrade, uninstall, rotate_keys, apply, assign, system_update, reboot, check_releases New entity types: worker, aws_credentials, worker_profile, release Read-only endpoints (list/get/status/logs) intentionally not audited — they don't change state and would flood the log. Each handler calls a small h.audit(c, action, entity, &id, metadata) helper that pulls adminID from the admin middleware and fires the existing AuditService.LogAction (fire-and-forget, never blocks the response).