Barcode Betty 1867f0bb87 feat: implement audit logging middleware for sensitive API operations ...

- Add AuditMiddleware that logs POST/PUT/PATCH/DELETE and GET /auth/me
- Logs structured JSON: event, timestamp, user_id, method, path, client_ip, status_code, duration_ms
- Excludes health endpoints and OPTIONS requests
- Never logs request/response bodies or auth headers/cookies
- Wire user_id from auth dependency via request.state
- Add add_audit_middleware() to app factory

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-14 13:41:55 +00:00

..

__init__.py

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

dependencies.py

feat: implement audit logging middleware for sensitive API operations

2026-04-14 13:41:55 +00:00

jwt.py

sync(api): copy latest standalone code and merge alembic migrations

2026-04-03 07:54:31 +00:00

passwords.py

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

routes.py

fix: correct email-in-address format, remove dead code, update tests (#110)

2026-04-03 13:34:21 +00:00