refactor(audit): replace magic strings with AuditModules/AuditActions constants
- Replace 349 .Audited("module", "action") calls with typed constants across 91 files
- Add 21 missing action constants to AuditActions.cs (Policy, Attestor, Evidence, Scanner)
- Compile-time safety for module/action naming across all 15 services
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -36,7 +36,7 @@ public static class IntegrationEndpoints
|
||||
.RequireAuthorization(IntegrationPolicies.Operate)
|
||||
.WithName("RunAiCodeGuard")
|
||||
.WithDescription(_t("integrations.ai_code_guard.run_description"))
|
||||
.Audited("integrations", "run_code_guard");
|
||||
.Audited(AuditModules.Integrations, AuditActions.Integrations.RunCodeGuard);
|
||||
|
||||
// List integrations
|
||||
group.MapGet("/", async (
|
||||
@@ -89,7 +89,7 @@ public static class IntegrationEndpoints
|
||||
.RequireAuthorization(IntegrationPolicies.Write)
|
||||
.WithName("CreateIntegration")
|
||||
.WithDescription(_t("integrations.integration.create_description"))
|
||||
.Audited("integrations", "create");
|
||||
.Audited(AuditModules.Integrations, AuditActions.Integrations.Create);
|
||||
|
||||
// Update integration
|
||||
group.MapPut("/{id:guid}", async (
|
||||
@@ -107,7 +107,7 @@ public static class IntegrationEndpoints
|
||||
.RequireAuthorization(IntegrationPolicies.Write)
|
||||
.WithName("UpdateIntegration")
|
||||
.WithDescription(_t("integrations.integration.update_description"))
|
||||
.Audited("integrations", "update");
|
||||
.Audited(AuditModules.Integrations, AuditActions.Integrations.Update);
|
||||
|
||||
// Delete integration
|
||||
group.MapDelete("/{id:guid}", async (
|
||||
@@ -124,7 +124,7 @@ public static class IntegrationEndpoints
|
||||
.RequireAuthorization(IntegrationPolicies.Write)
|
||||
.WithName("DeleteIntegration")
|
||||
.WithDescription(_t("integrations.integration.delete_description"))
|
||||
.Audited("integrations", "delete");
|
||||
.Audited(AuditModules.Integrations, AuditActions.Integrations.Delete);
|
||||
|
||||
// Test connection
|
||||
group.MapPost("/{id:guid}/test", async (
|
||||
@@ -141,7 +141,7 @@ public static class IntegrationEndpoints
|
||||
.RequireAuthorization(IntegrationPolicies.Operate)
|
||||
.WithName("TestIntegrationConnection")
|
||||
.WithDescription(_t("integrations.integration.test_description"))
|
||||
.Audited("integrations", "test");
|
||||
.Audited(AuditModules.Integrations, AuditActions.Integrations.Test);
|
||||
|
||||
// Discover resources
|
||||
group.MapPost("/{id:guid}/discover", async (
|
||||
@@ -170,7 +170,7 @@ public static class IntegrationEndpoints
|
||||
.RequireAuthorization(IntegrationPolicies.Operate)
|
||||
.WithName("DiscoverIntegrationResources")
|
||||
.WithDescription("Discover resources exposed by the integration provider.")
|
||||
.Audited("integrations", "discover");
|
||||
.Audited(AuditModules.Integrations, AuditActions.Integrations.Discover);
|
||||
|
||||
// Health check
|
||||
group.MapGet("/{id:guid}/health", async (
|
||||
|
||||
Reference in New Issue
Block a user