bitwarden/server
1
0
Fork 0
mirror of https://github.com/bitwarden/server synced 2026-01-04 09:33:40 +00:00
Code Issues Releases Wiki Activity

[SM-1273] Adding new logging for secrets (#5991)

Browse Source 
* Adding new logging for secrets

* fixing secrest controller tests

* fixing the tests
This commit is contained in:
cd-bitwarden
2025-07-02 22:28:48 -04:00
committed by GitHub
parent b7df8525af
commit 669a5cb372
6 changed files with 73 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
src/Api/SecretsManager/Controllers/SecretsController.cs
View File

@@ -109,7 +109,7 @@ public class SecretsController : Controller
}
var result = await _createSecretCommand.CreateAsync(secret, accessPoliciesUpdates);
await LogSecretEventAsync(secret, EventType.Secret_Created);
// Creating a secret means you have read & write permission.
return new SecretResponseModel(result, true, true);
}
@@ -135,10 +135,7 @@ public class SecretsController : Controller
throw new NotFoundException();
}
if (_currentContext.IdentityClientType == IdentityClientType.ServiceAccount)
{
await _eventService.LogServiceAccountSecretEventAsync(userId, secret, EventType.Secret_Retrieved);
}
await LogSecretEventAsync(secret, EventType.Secret_Retrieved);
return new SecretResponseModel(secret, access.Read, access.Write);
}
@@ -188,10 +185,10 @@ public class SecretsController : Controller
{
throw new NotFoundException();
}
}
var result = await _updateSecretCommand.UpdateAsync(updatedSecret, accessPoliciesUpdates);
await LogSecretEventAsync(secret, EventType.Secret_Edited);
// Updating a secret means you have read & write permission.
return new SecretResponseModel(result, true, true);
@@ -234,6 +231,7 @@ public class SecretsController : Controller
await _deleteSecretCommand.DeleteSecrets(secretsToDelete);
var responses = results.Select(r => new BulkDeleteResponseModel(r.Secret.Id, r.Error));
await LogSecretsEventAsync(secretsToDelete, EventType.Secret_Deleted);
return new ListResponseModel<BulkDeleteResponseModel>(responses);
}
@@ -253,7 +251,7 @@ public class SecretsController : Controller
throw new NotFoundException();
}
await LogSecretsRetrievalAsync(secrets);
await LogSecretsEventAsync(secrets, EventType.Secret_Retrieved);
var responses = secrets.Select(s => new BaseSecretResponseModel(s));
return new ListResponseModel<BaseSecretResponseModel>(responses);
@@ -290,18 +288,28 @@ public class SecretsController : Controller
if (syncResult.HasChanges)
{
await LogSecretsRetrievalAsync(syncResult.Secrets);
await LogSecretsEventAsync(syncResult.Secrets, EventType.Secret_Retrieved);
}
return new SecretsSyncResponseModel(syncResult.HasChanges, syncResult.Secrets);
}
private async Task LogSecretsRetrievalAsync(IEnumerable<Secret> secrets)
private async Task LogSecretsEventAsync(IEnumerable<Secret> secrets, EventType eventType)
{
if (_currentContext.IdentityClientType == IdentityClientType.ServiceAccount)
var userId = _userService.GetProperUserId(User)!.Value;
switch (_currentContext.IdentityClientType)
{
var userId = _userService.GetProperUserId(User)!.Value;
await _eventService.LogServiceAccountSecretsEventAsync(userId, secrets, EventType.Secret_Retrieved);
case IdentityClientType.ServiceAccount:
await _eventService.LogServiceAccountSecretsEventAsync(userId, secrets, eventType);
break;
case IdentityClientType.User:
await _eventService.LogUserSecretsEventAsync(userId, secrets, eventType);
break;
}
}
private Task LogSecretEventAsync(Secret secret, EventType eventType) =>
LogSecretsEventAsync(new[] { secret }, eventType);
}