medplum / medplum / 26894454242

92%

push

github

feat(server): record authenticating ClientApplication on AuditEvent.agent[] (#9337)

The per-interaction AuditEvent only ever recorded a single agent (the acting
profile / author), so the authenticating ClientApplication was absent from the
audit trail. Under X-Medplum-On-Behalf-Of the acting client disappeared
entirely, leaving the event indistinguishable from the user acting directly;
the same gap applies to SMART-on-FHIR apps acting on behalf of a user.

Thread login.client through the repository context and append it as an
additional non-requestor agent[] participant (DICOM "Application" role) when it
differs from the actor. agent[0] is unchanged, so consumers assuming agent[0]
is the actor are unaffected. The client is omitted when it is itself the actor
(client_credentials) or absent (system path). This generalizes the dual-agent
attribution createBotAuditEvent already produces.

Closes #9332

Signed-off-by: Jesse Carter <jesse.r.carter@gmail.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

22785 of 25553 branches covered (89.17%)

Branch coverage included in aggregate %.

4 of 4 new or added lines in 1 file covered. (100.0%)

35981 of 38219 relevant lines covered (94.14%)

23254.94 hits per line