up

src/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/IdentityProviderContracts.cs

@@ -4,6 +4,7 @@ using System.Linq;
 using System.Security.Claims;
 using System.Threading;
 using System.Threading.Tasks;
+using StellaOps.Cryptography.Audit;
 
 namespace StellaOps.Authority.Plugins.Abstractions;
 
@@ -311,13 +312,15 @@ public sealed record AuthorityCredentialVerificationResult
         AuthorityUserDescriptor? user,
         AuthorityCredentialFailureCode? failureCode,
         string? message,
-        TimeSpan? retryAfter)
+        TimeSpan? retryAfter,
+        IReadOnlyList<AuthEventProperty> auditProperties)
     {
         Succeeded = succeeded;
         User = user;
         FailureCode = failureCode;
         Message = message;
         RetryAfter = retryAfter;
+        AuditProperties = auditProperties ?? Array.Empty<AuthEventProperty>();
     }
 
     /// <summary>
@@ -345,13 +348,19 @@ public sealed record AuthorityCredentialVerificationResult
     /// </summary>
     public TimeSpan? RetryAfter { get; }
 
+    /// <summary>
+    /// Additional audit properties emitted by the credential store.
+    /// </summary>
+    public IReadOnlyList<AuthEventProperty> AuditProperties { get; }
+
     /// <summary>
     /// Builds a successful verification result.
     /// </summary>
     public static AuthorityCredentialVerificationResult Success(
         AuthorityUserDescriptor user,
-        string? message = null)
-        => new(true, user ?? throw new ArgumentNullException(nameof(user)), null, message, null);
+        string? message = null,
+        IReadOnlyList<AuthEventProperty>? auditProperties = null)
+        => new(true, user ?? throw new ArgumentNullException(nameof(user)), null, message, null, auditProperties ?? Array.Empty<AuthEventProperty>());
 
     /// <summary>
     /// Builds a failed verification result.
@@ -359,8 +368,9 @@ public sealed record AuthorityCredentialVerificationResult
     public static AuthorityCredentialVerificationResult Failure(
         AuthorityCredentialFailureCode failureCode,
         string? message = null,
-        TimeSpan? retryAfter = null)
-        => new(false, null, failureCode, message, retryAfter);
+        TimeSpan? retryAfter = null,
+        IReadOnlyList<AuthEventProperty>? auditProperties = null)
+        => new(false, null, failureCode, message, retryAfter, auditProperties ?? Array.Empty<AuthEventProperty>());
 }
 
 /// <summary>

src/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/StellaOps.Authority.Plugins.Abstractions.csproj

@@ -11,4 +11,7 @@
     <PackageReference Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="8.0.0" />
     <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="8.0.0" />
   </ItemGroup>
+  <ItemGroup>
+    <ProjectReference Include="..\..\StellaOps.Cryptography\StellaOps.Cryptography.csproj" />
+  </ItemGroup>
 </Project>