From d3270239d600d1050b0cb20baa9413731cdb38d2 Mon Sep 17 00:00:00 2001 From: RonniSkansing Date: Fri, 28 Aug 2026 22:27:36 +0200 Subject: [PATCH] add unified login audit log Signed-off-by: RonniSkansing --- backend/service/session.go | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/backend/service/session.go b/backend/service/session.go index 69f9ccd..ad73396 100644 --- a/backend/service/session.go +++ b/backend/service/session.go @@ -204,6 +204,13 @@ func (s *Session) Create( s.Logger.Errorw("failed to get session after creating it", "error", err) return nil, errs.Wrap(err) } + // a session is only created after all login checks have passed, + // including MFA and SSO, so this event marks a fully completed login + ae := NewAuditEvent("User.Login", createdSession) + if username, err := user.Username.Get(); err == nil { + ae.Details["username"] = username.String() + } + s.AuditLogAuthorized(ae) return createdSession, nil }