RavenDB-22265 Audit log on client certificates management operations

grisha-kotler · Dec 4, 2024 · 644489c · 644489c
1 parent 2d5439c
commit 644489c
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/src/Raven.Server/Web/Authentication/AdminCertificatesHandler.cs b/src/Raven.Server/Web/Authentication/AdminCertificatesHandler.cs
@@ -90,8 +90,8 @@ public async Task Generate()
                 {
                     var permissions = FormatPermissions(certificate);
 
-                    LogAuditFor("Certificates", "ADD", 
-                        $"Generate certificate {certificate?.Name}. Security Clearance: {certificate?.SecurityClearance}. Permissions: {permissions}. TwoFactor: {string.IsNullOrEmpty(twoFactorAuthenticationKey)}");
+                    LogAuditFor("Certificates", "GENERATE", 
+                        $"Certificate {certificate?.Name}. Security Clearance: {certificate?.SecurityClearance}. Permissions: {permissions}. TwoFactor: {string.IsNullOrEmpty(twoFactorAuthenticationKey)}");
                 }
 
                 byte[] certs = null;
@@ -776,7 +776,7 @@ public async Task Edit()
                     var permissions = FormatPermissions(newCertificate);
 
                     LogAuditFor("Certificates", "CHANGE", 
-                        $"Edit certificate {newCertificate?.Name}. Security Clearance: {newCertificate?.SecurityClearance}. Permissions: {permissions}. TwoFactor: {string.IsNullOrEmpty(twoFactorAuthenticationKey)}");
+                        $"Certificate {newCertificate?.Name}. Security Clearance: {newCertificate?.SecurityClearance}. Permissions: {permissions}. TwoFactor: {string.IsNullOrEmpty(twoFactorAuthenticationKey)}");
                 }
 
                 var cmd = new PutCertificateCommand(newCertificate.Thumbprint,
@@ -1003,7 +1003,7 @@ public async Task ForceRenew()
 
                 if (LoggingSource.AuditLog.IsInfoEnabled)
                 {
-                    LogAuditFor("Certificates", "RENEW", "Renew server certificate");
+                    LogAuditFor("Certificates", "RENEW", "Server certificate");
                 }
 
                 try