# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1701462753 -3600
# Node ID c89077b4f46e56a1e1ae9e8da607d4a1f1f2021b
# Parent  238c4ac8b735d3b48ac7cd0dc1bcd149f055a0f0
mod_audit_tokens: Record events fired by mod_tokenauth in audit log

diff -r 238c4ac8b735 -r c89077b4f46e mod_audit_tokens/README.md
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/mod_audit_tokens/README.md	Fri Dec 01 21:32:33 2023 +0100
@@ -0,0 +1,8 @@
+---
+summary: Store token events in the audit log
+rockspec:
+  dependencies:
+  - mod_audit
+...
+
+This module stores events relating to auth tokens, e.g. grant creations and revokations, in the audit log provided by `mod_audit`.
diff -r 238c4ac8b735 -r c89077b4f46e mod_audit_tokens/mod_audit_tokens.lua
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/mod_audit_tokens/mod_audit_tokens.lua	Fri Dec 01 21:32:33 2023 +0100
@@ -0,0 +1,19 @@
+local jid = require"util.jid";
+
+module:depends("audit");
+-- luacheck: read globals module.audit
+
+module:hook("token-grant-created", function(event)
+	module:audit(jid.join(event.username, event.host), "token-grant-created", {
+	});
+end)
+
+module:hook("token-grant-revoked", function(event)
+	module:audit(jid.join(event.username, event.host), "token-grant-revoked", {
+	});
+end)
+
+module:hook("token-revoked", function(event)
+	module:audit(jid.join(event.username, event.host), "token-revoked", {
+	});
+end)