User story #28179: Add information about last access for API accounts - Rudder - Issue Tracker

Actions

Copy link

User story #28179

open

Add information about last access for API accounts

User story #28179: Add information about last access for API accounts

Added by Clark ANDRIANASOLO 25 days ago. Updated 8 days ago.

Status:

Pending release

Priority:

N/A

Assignee:

Clark ANDRIANASOLO

Category:

Security

Target version:

9.1.0~alpha1

Pull Request:

https://github.com/Normation/rudder/p...

UX impact:

It bothers me each time

Suggestion strength:

Want - This would make my life a lot easier but I can manage without

User visibility:

First impressions of Rudder

Effort required:

Medium

Name check:

To do

Fix check:

To do

Regression:

Description

For audit purposes, API accounts should expose the last time their token was used/there has been a successful API authentication for the account.

Since we can always generate new tokens (or have no token at all, in the case of OIDC opaque bearer token), this date should be bound to the API account being authenticated.
And since a user can generate a personal token with the api-authorizations plugin, we should think about how we should expose those user tokens, and display it with the existing user token information.

So, for now, we need to have the information in the API, and in a next step in the API accounts UI

Subtasks 3 (2 open — 1 closed)