Idea: Client secret usage statistics

Open yuriyostapenko opened this issue 9 years ago • 1 comments

Just got this idea and wanted to check what you guys think:

I'd like to be able to see dead/unused clients/secrets in my client admin UI.

What if we added a very much optional string Id field to an IdSvr's Secret and a service interface that would be called with that Id from, say, the SecretValidator. Then I could know when my secret was used for authentication by a client and could mark the lastUsedDate on it.

Seems a trivial change and I'm ready to PR it to both v3 and v4 :) But what do you think?

UPDATE: The notification could probably go through IEventService with a special event payload type

Oct 11 '16 07:10 yuriyostapenko

Sorry - way to busy right now - we will discuss ASAP.

Nov 03 '16 10:11 leastprivilege