1.2.0

Release Notes

For: uc-cdis/audit-service

Notes since tag: 1.1.0

Notes to tag/commit: 3e9a7ca

Generated: 2024-02-29

New Features

• Add ability to read DB information from env vars (#22)

Improvements

• Log detailed authentication errors from authutils (#30)
• Add API example requests (#28)
• Use central github workflow actions for image build and push (#24)
• Removing Veracode scanning pipeline (#21)
• Removing Veracode scanning pipeline (#20)
• Use pip to install poetry in CI (#19)
• Improve the documentation about authorization (#18)
• Do not accept string "sub" in login logs anymore (#15)

Dependency Updates

• cryptography to 42.0.5 (#47)
• Bumps urllib3 from 1.26.15 to
  1.26.17. (#38)
• Bumps certifi from 2022.12.7
  to 2023.7.22. (#35)
• Bumps requests from 2.28.2 to 2.31.0.
  (#32)
• Update pyjwt to ^2.4.0 (through authutils ^6.2.1), websockets to ^10
  (through uvicorn ^0.18.3), jinja2 to ^3.0.3 (through gen3config ^1.0.0),
  gen3authz to ^2.0.0, httpx to ^0.23.0 (#18)

1.1.0

Release Notes

For: uc-cdis/audit-service

Notes since tag: 1.0.0

Notes to tag/commit: 2bf4cd4

Generated: 2022-03-23

New Features

• Split the private fields from the public fields in the audit logging
  configuration (#6)

Bug Fixes

• Temporarily accept string "sub" in login logs (#14)
• Fix querying timestamps (#12)
• Fix querying non-string fields (#7)
• Presigned URL field "sub" can be None (#3)

Improvements

• Upgrade to Python 3.9. (#17)
• Audit Service runs into a CrashLoopBackOff when there is an exception
  instead of perpetually being in the Running state (#10)
• Use SQS messages' 'SentTimestamp' instead of generating timestamps when
  processing audit logs (#4)

Dependency Updates

• fastapi to 0.65.2+ and fix cdislogging version (#8)

Fetch audit logs from an AWS SQS

Release Notes

For: uc-cdis/audit-service

Notes since tag: 0.1.0

Notes to tag/commit: 1.0.0

Generated: 2021-06-10

New Features

• The audit service can be configured to fetch audit logs from an AWS SQS (#2)

Improvements

• Return an error if an invalid timestamp is provided to the log creation
  endpoint (#2)
• Presigned URL logs can now have an empty "resource_paths" field (#2)

Dependency Updates

• Add dependency to boto3 version ^1.14 (#2)

Deployment Changes

• If a previous version of the audit service has already been deployed,
  run kubectl delete secret audit-g3auto and gen3 kube-setup-audit-service to configure the audit SQS and update the
  configuration file. REQUIRES Fence 5.1.0 or more recent. OR to disable pulling from a queue, update the
  configuration file manually to disable "PULL_FROM_QUEUE" (#2)

Audit service first release

New Features

• The audit service can track login events and presigned URL upload/download events