feat(audit): finish PMS-117 story (scaffold, middleware writer, read endpoint) #37

Closed

David wants to merge 0 commits from feat/audit-story-pms-117 into main

David commented

2026-05-18 05:25:22 +02:00

Owner

Closes #PMS-117

David added 1 commit

2026-05-18 05:25:23 +02:00

feat(audit): scaffold + writer middleware + read endpoint

Create release / Create release from merged PR (pull_request) Has been skipped

Details

02deaed317

Final story in the PMS-117 series:
- PMS-118 scaffold + router wire
- PMS-119 audit-log writer middleware. Runs after `auth_middleware` so it can pull tenant/user from `AuthState`. Classifies the HTTP method into the audit_log CHECK-constraint actions (create/update/delete) and pulls the entity_type from the URL's second path segment. Only audits *successful* mutating requests. Failures are swallowed - a bad log write must never break the request.
- PMS-120 `GET /api/v1/audit-log`. Admin-only. Paginated + filterable by user / entity / action / timestamp range. Tenant-scoped to the caller's tenant; super-admin cross-tenant support is signposted in the handler (X-Tenant-Id header) but the special-case middleware hasn't landed yet.

#PMS-118 State Done
#PMS-119 State Done
#PMS-120 State Done