Method createAuditLog

backend/api/v1/audit.go:189–318

(ctx context.Context, e *auditEntry)

}

func (in *AuditInterceptor) createAuditLog(ctx context.Context, e *auditEntry) error {
	// Skip audit logging for validate-only requests.
	if isValidateOnlyRequest(e.request) {
		return nil
	}

	requestString, err := getRequestString(e.request)
	if err != nil {
		return errors.Wrapf(err, "failed to get request string")
	}
	responseString, err := getResponseString(e.response)
	if err != nil {
		return errors.Wrapf(err, "failed to get response string")
	}

	var user string
	if u, ok := GetUserFromContext(ctx); ok {
		user = common.FormatUserEmail(u.Email)
	} else {
		// Try to get user from successful login response.
		if loginResponse, ok := e.response.(*v1pb.LoginResponse); ok {
			user = loginResponse.GetUser().GetName()
		}
	}

	authContextAny := ctx.Value(common.AuthContextKey)
	authContext, ok := authContextAny.(*common.AuthContext)
	if !ok {
		return connect.NewError(connect.CodeInternal, errors.New("auth context not found"))
	}

	requestMetadata := getRequestMetadataFromHeaders(e.headers, e.peerAddr)

	// Build the list of parents to audit under. Normally these come from the
	// ACL interceptor via authContext.Resources. For audited methods that run
	// without a workspace-bound caller (Login/Signup/ExchangeToken), Resources
	// is empty; fall back to the workspace the handler announced, or any
	// workspace embedded in the response, so the audit entry is still written.
	type auditParent struct {
		parent           string
		auditWorkspaceID string
	}
	var parents []auditParent
	for _, authResource := range authContext.Resources {
		switch authResource.Type {
		case common.ResourceTypeProject:
			parents = append(parents, auditParent{
				parent: common.FormatProject(authResource.ID),
			})
		case common.ResourceTypeWorkspace:
			parents = append(parents, auditParent{
				parent:           common.FormatWorkspace(authResource.ID),
				auditWorkspaceID: authResource.ID,
			})
		default:
		}
	}
	if len(parents) == 0 {