Skip to content

feat(audit): expose group audit history - #315

Merged
K1NGD4VID merged 5 commits into
mergepay:mainfrom
thelight08:fix/issue-277
Sep 2, 2026
Merged

feat(audit): expose group audit history#315
K1NGD4VID merged 5 commits into
mergepay:mainfrom
thelight08:fix/issue-277

Conversation

@thelight08

Copy link
Copy Markdown
Contributor

Closes #277

Adds the plural authenticated group audit-log endpoint while retaining the existing singular route for compatibility. Access remains restricted to group administrators.

@drips-wave

drips-wave Bot commented Aug 27, 2026

Copy link
Copy Markdown

@thelight08 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@mergekeeper

mergekeeper Bot commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

Needs changes

The PR implements audit log endpoints and actions, but lacks required unit and integration tests for route access authorization and audit log creation.

  • tests/routes/groups.test.ts: Missing required unit and integration tests verifying audit log creation and route access authorization as specified in the issue acceptance criteria.

Reviewed commit: ddd61956bfaaca764ab27de70b4fd15fa009d2eb.

@mergekeeper mergekeeper Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Needs changes

The PR exposes the required plural endpoint but fails to implement structured security audit logging for administrative group updates, central audit log service, and tests.

  • src/routes/audit-log.ts: Missing implementation of administrative audit log creation within group update actions as required by issue #277.
  • Review finding: Missing required unit and integration tests verifying audit log creation and route access authorization.

Reviewed commit: c18e4c4e25eab5c043e94844a2a2391552e260e4.

@thelight08

Copy link
Copy Markdown
Contributor Author

@Cjay-Cyber-2 The plural authenticated audit-log endpoint is pushed and ready for review; the existing singular route remains compatible. Closes #277.

@mergekeeper

mergekeeper Bot commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

MergeKeeper review

Scope: in scope for linked issue #277.
Verdict: clean

The pull request correctly implements the requested administrative audit logging service updates, endpoints, and transactional audit records according to issue requirements.

Reviewed commit: c2436a66599058be98282ad237a2d99715e20180.
CI and merge eligibility are checked separately.

@mergekeeper

mergekeeper Bot commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

Needs review

Linked to #277, but the diff does not match the issue scope.

The pull request modifies and removes test coverage, routes, and services that were not requested or conflict with the requirements specified in issue #277.

Reviewed commit: e2b1c528837c3bdf1f4758b2a629733eca63e614.

@mergekeeper mergekeeper Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Needs changes

The PR implements administrative audit logging actions and updates routes, but misses the requested GET /groups/:id/audit-logs endpoint and associated tests.

  • src/routes/groups.ts: Missing implementation of the required GET /groups/:id/audit-logs endpoint to query paginated historical audit events restricted to group admins.

Reviewed commit: 939ae4adf8729cc29a1c9db4685ba3bd115c57e6.

@mergekeeper mergekeeper Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Needs changes

The PR implements audit log endpoints and actions, but lacks required unit and integration tests for route access authorization and audit log creation.

  • tests/routes/groups.test.ts: Missing required unit and integration tests verifying audit log creation and route access authorization as specified in the issue acceptance criteria.

Reviewed commit: ddd61956bfaaca764ab27de70b4fd15fa009d2eb.

@thelight08

Copy link
Copy Markdown
Contributor Author

✅ Merge conflicts with main have been resolved and the branch is up to date with the latest base. @mergepay this PR is ready for review. It closes issue #277.

@K1NGD4VID
K1NGD4VID merged commit abd35eb into mergepay:main Sep 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Implement structured security audit logging for administrative group updates

4 participants