Package com.ericbouchut.learndev.audit

Class AuditService

java.lang.Object

com.ericbouchut.learndev.audit.AuditService

@Service
public class AuditService
extends Object

Minimal security audit trail: internal use only, no controller. Callers record one event per security-relevant action (see the password-reset flow).

Constructor Summary

Constructors

Constructor	Description
AuditService(AuditLogRepository auditLogs)

Method Summary

Modifier and Type	Method	Description
void	record(String actionType, User user, String ipAddress, boolean successful, String description)	Records one audit event.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

AuditService

public AuditService(AuditLogRepository auditLogs)

Method Details

record

public void record(String actionType,
 User user,
 String ipAddress,
 boolean successful,
 String description)

Records one audit event.

Parameters:

actionType - machine-readable event name, e.g. PASSWORD_RESET_REQUESTED

user - the subject, or null when there is none

ipAddress - requester IP, or null

successful - whether the action succeeded

description - human-readable detail (never include secrets)