Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add audit log #1357

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

michaelschattgen
Copy link
Member

@michaelschattgen michaelschattgen commented Apr 17, 2024

This pull request is aiming to give more insight to important events that occurred within the app. We chose to use a SQLite database in combination with Room. I've made the choice to only show the entries of the last 30 days for now, but we might want to change that in the future.

The events we're currently tracking are:

  • Vault unlocked
  • Backup created
  • Vault exported
  • Entry shared
  • Failed vault unlock attempt with password
  • Failed vault unlock attempt with biometrics

Feel free to comment on this PR if you think we need to track other events.

This is discussed in #1069 and makes it possible to implement #1132.

@InfiniteCoder06
Copy link
Contributor

@michaelschattgen A small suggestion is to delete the entries greater than 30 days periodically.

Copy link
Member

@alexbakker alexbakker left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks great! I've added a couple of comments.

I think the audit log event types you defined cover most of the important events, but I am missing an event for backups made through AegisBackupAgent. Because Android starts backup agents in a weird restricted mode, this one requires some careful testing to make sure it works correctly.

@elliotwutingfeng
Copy link

I like this feature! I think it should also track when the vault password has been changed.

@michaelschattgen
Copy link
Member Author

@elliotwutingfeng I like that! I'm leaving this pull request for what it is (otherwise it will never get done) but that's definitely going on the backlog. Thanks for the suggestion.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants