Audit Logs

GO Shortener maintains a tamper-resistant security audit log accessible exclusively to users with the super_admin role via /admin/login-records.

Access Restrictions

Logged Security Events

The audit engine captures high-value security milestones:

1. Authentication Records

• Successful Logins: Logs the exact timestamp, account email, authentication provider (email vs google), and client User-Agent.
• Failed Login Attempts: Records invalid password submissions or non-existent account probes to assist in detecting brute-force or credential stuffing campaigns.

2. Intrusion Detection & Administrative Probes

• Unauthorized Admin Access: When an unauthenticated visitor or a standard user attempts to query an /api/admin/* endpoint directly, the security middleware intercepts the request, returns 403 Forbidden, and writes an alert record to login_records.
• Privilege Escalation Attempts: Records any unauthorized attempt by a moderator to modify a super_admin account.

Telemetry Fields

Each record in the audit log captures:

+-----------------------+-----------------------------+-------------------+---------------------+---------+
| Timestamp             | Account / Identifier        | IP Hash (SHA-256) | Client User-Agent   | Status  |
+-----------------------+-----------------------------+-------------------+---------------------+---------+
| 2026-09-03 14:22:01   | admin@example.com           | 7f83b1657ff1fc5...| Mozilla/5.0 ...     | SUCCESS |
| 2026-09-03 14:35:19   | suspicious_probe@target     | e3b0c44298fc1c1...| curl/7.88.1         | BLOCKED |
+-----------------------+-----------------------------+-------------------+---------------------+---------+

• Timestamp: High-precision UTC timestamp.
• Account / Identifier: The email address or targeted entity.
• IP Hash: Cryptographic SHA-256 hash with secret identity salt (guaranteeing compliance with privacy standards while preserving investigative correlation).
• Client User-Agent: Full browser or HTTP client signature.
• Status: Visual indicator (SUCCESS, FAILED, or BLOCKED).