From c922ebecb04ada62cf1f6bf5a058c0e0878984a4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Anderson=20Val=C3=A9rio?= Date: Fri, 9 May 2025 06:05:01 -0300 Subject: [PATCH] fix audit log --- oauthproxy.go | 2 +- pkg/pics/audit/audit_client.go | 6 ++++++ 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/oauthproxy.go b/oauthproxy.go index 1b76b18a..09fd2e2a 100644 --- a/oauthproxy.go +++ b/oauthproxy.go @@ -824,7 +824,7 @@ func (p *OAuthProxy) backendLogout(rw http.ResponseWriter, req *http.Request, si if resp.StatusCode() != 200 { logger.Errorf("error while calling backend revoke acess token url, returned error code %v", resp.StatusCode()) } - p.picsAuditClient.CreateSuccessfulLogoutAuditEntry(session, req.RequestURI, req.Header.Get("edisp-org-id")) + p.picsAuditClient.CreateSuccessfulRevokeAccessTokenAuditEntry(session, req.RequestURI, req.Header.Get("edisp-org-id")) } if providerData.BackendLogoutURL == "" { diff --git a/pkg/pics/audit/audit_client.go b/pkg/pics/audit/audit_client.go index 2f3d981d..3cc2c9d5 100644 --- a/pkg/pics/audit/audit_client.go +++ b/pkg/pics/audit/audit_client.go @@ -70,6 +70,12 @@ func (c *Client) CreateSuccessfulLogoutAuditEntry(ss *sessions.SessionState, app c.createAuditEntry(ss, appURL, tenantID, "0", "Success", &coding) } +func (c *Client) CreateSuccessfulRevokeAccessTokenAuditEntry(ss *sessions.SessionState, appURL string, tenantID string) { + coding := Coding{ + System: "http://hl7.org/fhir/ValueSet/audit-event-type", Version: "1", Code: "110123", Display: "User revoked access token"} + c.createAuditEntry(ss, appURL, tenantID, "0", "Success", &coding) +} + func (c *Client) createAuditEntry(ss *sessions.SessionState, appURL string, tenantID string, outcomeCode string, outcomeDesc string, coding *Coding) { if !c.enabled { return