umputun / secrets / 20442116726

85%

push

github

Improve audit logging for security and usage analytics (#94)

* feat(server): improve audit logging for security and usage analytics

- Add HashedIP middleware to inject anonymized IP into request context
- Add type, size, and hashed IP to message creation logs
- Add type and hashed IP to message access logs
- Add login success/failure logging with hashed IP
- Add basic auth failure logging with hashed IP
- Move store-level "not found" logs from INFO to DEBUG to reduce noise
- Add unit tests for HashedIP middleware and GetHashedIP helper

* fix: handle RemoteAddr without port for proxy setups

rest.RealIP middleware sets RemoteAddr to just the IP (no port)
when behind a reverse proxy. net.SplitHostPort fails in this case,
causing all audit logs to show ip=-.

Add extractIP helper that:
- Tries host:port split first
- Falls back to net.ParseIP for port-less addresses
- Returns empty for invalid inputs

Related to #94

64 of 64 new or added lines in 6 files covered. (100.0%)

1616 of 1900 relevant lines covered (85.05%)

22.9 hits per line