all callers of Audit() identify which keys may contain PII

This commit is contained in:
Ryan Richard
2024-11-12 12:22:41 -08:00
committed by Joshua Casey
parent a308f3f22a
commit e126ee5495
6 changed files with 113 additions and 71 deletions

View File

@@ -2340,18 +2340,22 @@ func TestRefreshGrant(t *testing.T) {
},
}),
testutil.WantAuditLog("Identity Refreshed From Upstream IDP", map[string]any{
"sessionID": sessionID,
"upstreamGroups": []any{},
"upstreamUsername": "some-username",
"sessionID": sessionID,
"personalInfo": map[string]any{
"upstreamGroups": []any{},
"upstreamUsername": "some-username",
},
}),
testutil.WantAuditLog("Session Refreshed", map[string]any{
"sessionID": sessionID,
"username": "some-username",
"groups": []any{
"group1",
"groups2",
"personalInfo": map[string]any{
"username": "some-username",
"groups": []any{
"group1",
"groups2",
},
"subject": "https://issuer?sub=some-subject",
},
"subject": "https://issuer?sub=some-subject",
}),
}
},
@@ -2533,9 +2537,11 @@ func TestRefreshGrant(t *testing.T) {
},
}),
testutil.WantAuditLog("Identity Refreshed From Upstream IDP", map[string]any{
"sessionID": sessionID,
"upstreamGroups": []any{},
"upstreamUsername": "some-username",
"sessionID": sessionID,
"personalInfo": map[string]any{
"upstreamGroups": []any{},
"upstreamUsername": "some-username",
},
}),
testutil.WantAuditLog("Authentication Rejected By Transforms", map[string]any{
"sessionID": sessionID,