From 321f8d28bb7bb218d4596a53a340d45dd3d88902 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@rubenfiszel.com>
Date: Sat, 17 Dec 2022 13:54:46 +0100
Subject: [PATCH] add audit log for oauth login

---
 backend/windmill-api/src/oauth2.rs | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/backend/windmill-api/src/oauth2.rs b/backend/windmill-api/src/oauth2.rs
index 5ac7aa5107..55cda444d0 100644
--- a/backend/windmill-api/src/oauth2.rs
+++ b/backend/windmill-api/src/oauth2.rs
@@ -32,7 +32,7 @@ use tower_cookies::{Cookie, Cookies};
 use windmill_audit::{audit_log, ActionKind};
 use windmill_common::utils::{not_found_if_none, now_from_db};
 
-use crate::users::Authed;
+use crate::users::{truncate_token, Authed};
 use crate::workspaces::invite_user_to_all_auto_invite_worspaces;
 use crate::{
     db::{UserDB, DB},
@@ -910,6 +910,16 @@ async fn login_callback(
                      login type {login_type}"
                 )));
             }
+            audit_log(
+                &mut tx,
+                &email,
+                "oauth.login",
+                ActionKind::Create,
+                "global",
+                Some(&truncate_token(&token)),
+                None,
+            )
+            .await?;
         } else {
             let mut name = user.name;
             if name.is_none() || name == Some(String::new()) {