openfire-restAPI-plugin icon indicating copy to clipboard operation
openfire-restAPI-plugin copied to clipboard

Published 20 hours ago • verified publisher icon igniterealtime

Additional logging

Open Fishbowler opened this issue 2 years ago • 0 comments

All uses of the API should be (optionally) logged. We already record certain operations on MUC and users, but we could do a lot more, recording all uses of the API in a lightweight structured logging fashion. This mitigates a risk of use in business-critical enterprise scenarios.

Bonus points for adding select events as Security Audit Events.

Fishbowler avatar Jun 28 '22 21:06 Fishbowler