Struct AuditEntry 

pub struct AuditEntry {
    pub event_type: AuditEventType,
    pub secret_type: SecretType,
    pub subject: Option<String>,
    pub operation: String,
    pub success: bool,
    pub error_message: Option<String>,
    pub context: Option<String>,
    pub chain_hash: Option<String>,
}

Audit log entry

Size Bounds

To prevent memory exhaustion and ensure predictable performance, each field is bounded in size:

• subject: Max 256 bytes (see bounds::MAX_SUBJECT_LEN)
• operation: Max 50 bytes (see bounds::MAX_OPERATION_LEN)
• error_message: Max 1 KB (see bounds::MAX_ERROR_MESSAGE_LEN)
• context: Max 2 KB (see bounds::MAX_CONTEXT_LEN)
• Total per entry: ~4 KB

Thread Safety

This struct is immutable once created and Send + Sync, making it safe to pass between threads. Audit loggers that implement AuditLogger trait are responsible for thread-safe storage.

Fields

event_type: AuditEventType

Event type (jwt_validation, oauth_callback, etc.)

secret_type: SecretType

Type of secret accessed (jwt_token, session_token, etc.)

subject: Option<String>

Subject (user ID, service account, etc.) - None for anonymous Max 256 bytes per bounds::MAX_SUBJECT_LEN

operation: String

Operation performed (validate, create, revoke, etc.) Max 50 bytes per bounds::MAX_OPERATION_LEN

success: bool

Whether the operation succeeded

error_message: Option<String>

Error message if operation failed (user-safe message) Max 1 KB per bounds::MAX_ERROR_MESSAGE_LEN

context: Option<String>

Additional context Max 2 KB per bounds::MAX_CONTEXT_LEN

chain_hash: Option<String>

HMAC-SHA256 chain hash for tamper detection (64 hex chars).

Each entry’s hash depends on all previous entries, making retroactive tampering detectable. None when tamper-evident logging is disabled. Verify with crate::audit::chain::verify_chain.

Trait Implementations

impl Clone for AuditEntry

fn clone(&self) -> AuditEntry

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditEntry

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuditEntry

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AuditEntry

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.