feat: Add login/logout audit logging (refs #10)
All checks were successful
Deploy to Staging / Build Images (pull_request) Successful in 4m42s
Deploy to Staging / Deploy to Staging (pull_request) Successful in 38s
Deploy to Staging / Verify Staging (pull_request) Successful in 7s
Deploy to Staging / Notify Staging Ready (pull_request) Successful in 6s
Deploy to Staging / Notify Staging Failure (pull_request) Has been skipped

Backend:
- Add login event logging to getUserStatus() controller method
- Create POST /auth/track-logout endpoint for logout tracking

Frontend:
- Create useLogout hook that wraps Auth0 logout with audit tracking
- Update all logout locations to use the new hook (SettingsPage,
  Layout, MobileSettingsScreen, useDeletion)

Login events are logged when the frontend calls /auth/user-status after
Auth0 callback. Logout events are logged via fire-and-forget call to
/auth/track-logout before Auth0 logout.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Eric Gullickson
2026-01-11 12:08:41 -06:00
parent cdfba3c1a8
commit fbde51b8fd
7 changed files with 121 additions and 13 deletions

View File

@@ -4,6 +4,7 @@
import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query';
import { useAuth0 } from '@auth0/auth0-react';
import { useLogout } from '../../../core/auth/useLogout';
import { profileApi } from '../api/profile.api';
import { RequestDeletionRequest } from '../types/profile.types';
import toast from 'react-hot-toast';
@@ -36,7 +37,7 @@ export const useDeletionStatus = () => {
export const useRequestDeletion = () => {
const queryClient = useQueryClient();
const { logout } = useAuth0();
const { logout } = useLogout();
return useMutation({
mutationFn: (data: RequestDeletionRequest) => profileApi.requestDeletion(data),
@@ -45,9 +46,9 @@ export const useRequestDeletion = () => {
queryClient.invalidateQueries({ queryKey: ['user-profile'] });
toast.success(response.data.message || 'Account deletion scheduled');
// Logout after 2 seconds
// Logout after 2 seconds (with audit tracking)
setTimeout(() => {
logout({ logoutParams: { returnTo: window.location.origin } });
logout();
}, 2000);
},
onError: (error: ApiError) => {

View File

@@ -1,5 +1,6 @@
import React, { useState } from 'react';
import { useAuth0 } from '@auth0/auth0-react';
import { useLogout } from '../../../core/auth/useLogout';
import { GlassCard } from '../../../shared-minimal/components/mobile/GlassCard';
import { MobileContainer } from '../../../shared-minimal/components/mobile/MobileContainer';
import { useSettings } from '../hooks/useSettings';
@@ -75,7 +76,8 @@ const Modal: React.FC<ModalProps> = ({ isOpen, onClose, title, children }) => {
};
export const MobileSettingsScreen: React.FC = () => {
const { user, logout } = useAuth0();
const { user } = useAuth0();
const { logout } = useLogout();
const { navigateToScreen } = useNavigationStore();
const { settings, updateSetting, isLoading, error } = useSettings();
const { data: profile, isLoading: profileLoading } = useProfile();
@@ -98,11 +100,7 @@ export const MobileSettingsScreen: React.FC = () => {
}, [profile, isEditingProfile]);
const handleLogout = () => {
logout({
logoutParams: {
returnTo: window.location.origin
}
});
logout();
};
const handleExportData = () => {