medplum / medplum / 26894454242 / 1

92%

main: 92%

push

github

feat(server): record authenticating ClientApplication on AuditEvent.agent[] (#9337)

The per-interaction AuditEvent only ever recorded a single agent (the acting
profile / author), so the authenticating ClientApplication was absent from the
audit trail. Under X-Medplum-On-Behalf-Of the acting client disappeared
entirely, leaving the event indistinguishable from the user acting directly;
the same gap applies to SMART-on-FHIR apps acting on behalf of a user.

Thread login.client through the repository context and append it as an
additional non-requestor agent[] participant (DICOM "Application" role) when it
differs from the actor. agent[0] is unchanged, so consumers assuming agent[0]
is the actor are unaffected. The client is omitted when it is itself the actor
(client_credentials) or absent (system path). This generalizes the dual-agent
attribution createBotAuditEvent already produces.

Closes #9332

Signed-off-by: Jesse Carter <jesse.r.carter@gmail.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

23624 of 26514 branches covered (89.1%)

Branch coverage included in aggregate %.

50979 of 54069 relevant lines covered (94.29%)

16437.89 hits per line