🚀 Feature: Audit Log Improvements - Add Username #397

Closed
opened 2025-10-08 00:06:53 +03:00 by OVERLORD · 4 comments
Owner

Originally created by @eximo84 on GitHub.

Feature description

Currently the audit log shows the client, IP and the audit log event but doesnt show the user on which the event was trigged by.

Image

Pitch

Having the user can help to understand who is accessing my services

Originally created by @eximo84 on GitHub. ### Feature description Currently the audit log shows the client, IP and the audit log event but doesnt show the user on which the event was trigged by. ![Image](https://github.com/user-attachments/assets/342574ad-7b1e-4bb5-a00a-41cc3db271b5) ### Pitch Having the user can help to understand who is accessing my services
OVERLORD added the feature label 2025-10-08 00:06:53 +03:00
Author
Owner

@eximo84 commented on GitHub:

Side note to this, is there a better explaination to the audit events, the IPs in my screenshot are from random IPs outside of my network and country. I have the GEODB setup but they are reporting unknown still. However the events, should i be worried? Are they suggesting that a new client was authorizated against FreshRSS? i currently have two users, one hasnt been setup with a passkey yet....

@eximo84 commented on GitHub: Side note to this, is there a better explaination to the audit events, the IPs in my screenshot are from random IPs outside of my network and country. I have the GEODB setup but they are reporting unknown still. However the events, should i be worried? Are they suggesting that a new client was authorizated against FreshRSS? i currently have two users, one hasnt been setup with a passkey yet....
Author
Owner

@stonith404 commented on GitHub:

An admin can easily create a one-time access link to sign in to a user’s account. Or is this not enough?

@stonith404 commented on GitHub: An admin can easily create a one-time access link to sign in to a user’s account. Or is this not enough?
Author
Owner

@stonith404 commented on GitHub:

The audit log is specific to each user, so users can only see their own logs. Because of this, the suggested feature wouldn’t be practical or useful.

@stonith404 commented on GitHub: The audit log is specific to each user, so users can only see their own logs. Because of this, the suggested feature wouldn’t be practical or useful.
Author
Owner

@cdanis commented on GitHub:

FWIW I think it would be reasonable to let admins view the audit log of another user, as well as having the ability to remove a passkey from an account. A bit more peace of mind if a user contacts you about a lost device.

@cdanis commented on GitHub: FWIW I think it would be reasonable to let admins view the audit log of another user, as well as having the ability to remove a passkey from an account. A bit more peace of mind if a user contacts you about a lost device.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/pocket-id-pocket-id-1#397