Skip to content

BE 046 – Define and Verify Audit-Log Persistence Configuration - #502

Open
Karam-preet wants to merge 2 commits into
mainfrom
Karam-preet/BE-046-audit-log-config
Open

BE 046 – Define and Verify Audit-Log Persistence Configuration#502
Karam-preet wants to merge 2 commits into
mainfrom
Karam-preet/BE-046-audit-log-config

Conversation

@Karam-preet

Copy link
Copy Markdown
Collaborator

Summary

Implements BE 046 to make audit-log persistence configuration predictable,
validated and operationally visible.

Changes

  • Added validation for AUDIT_LOG_ENABLED.
  • Only true and false values are accepted.
  • Audit logging defaults to enabled when the setting is not provided.
  • Added a clear warning when audit persistence is disabled.
  • Preserved existing audit logging API behaviour.
  • Added focused middleware/configuration tests.
  • Updated README configuration guidance.

Testing

  • npm test -- --runInBand tests/logger.middleware.test.js
  • Result: 3 tests passed.
  • git diff --check passed.
Screenshot 2026-08-15 023248

Out of scope

  • Audit-log role filtering
  • SIEM integration
  • Retention policy
  • Audit-system redesign

@Karam-preet
Karam-preet requested a review from LoopyB August 15, 2026 04:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants