Skip to content

feat: Add audit log IP and user-agent capture for SOC2 traceability (… - #1506

Open
alamuoyeemmanuel7-create wants to merge 1 commit into
Junirezz:mainfrom
alamuoyeemmanuel7-create:feature/audit-log-soc2-1454
Open

alamuoyeemmanuel7-create wants to merge 1 commit into
Junirezz:mainfrom
alamuoyeemmanuel7-create:feature/audit-log-soc2-1454

Conversation

@alamuoyeemmanuel7-create

Copy link
Copy Markdown

closes #1454

@drips-wave

drips-wave Bot commented Sep 29, 2026

Copy link
Copy Markdown

@alamuoyeemmanuel7-create Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

…Issue Junirezz#1454) - Add userAgent field to AuditLogEntry interface - Capture IP address and user-agent in all audit log entries - Implement optional IP hashing with daily salt for privacy - Update both in-memory and database audit systems - Add comprehensive test suite for audit log IP/user-agent capture - Add environment variable AUDIT_HASH_IP to control IP hashing - Maintain backward compatibility with existing audit log system Acceptance Criteria: ✅ IP and user-agent captured in audit logs ✅ Optional IP hashing with daily salt for privacy ✅ SOC2 traceability requirements met ✅ Comprehensive test coverage ✅ Full documentation provided

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Audit log for admin actions does not include actor IP and user-agent breaking SOC2 traceability

1 participant