Struct AuditEvent 

pub struct AuditEvent {
    pub id: String,
    pub created_at: u64,
    pub action: AuditAction,
    pub user_id: Option<String>,
    pub actor_id: Option<String>,
    pub tenant_id: Option<String>,
    pub ip: Option<String>,
    pub user_agent: Option<String>,
    pub success: bool,
    pub reason: Option<String>,
    pub metadata: HashMap<String, String>,
}

One audit-log row. Writes are append-only; the only mutation path is creating a new event.

Fields

id: String

Stable id (evt_<24-base64url>).

created_at: u64

Unix-epoch seconds. Wall-clock from the server’s perspective.

action: AuditAction

What happened. Stable enum so SIEM dashboards can match on well-known names. Apps that need bespoke events use AuditAction::Custom("...").

user_id: Option<String>

User the event is ABOUT (subject). Distinct from actor_id — an admin disabling a user’s account has actor=admin, subject=user.

actor_id: Option<String>

User who PERFORMED the action. Same as user_id for self- service flows. None for system-driven events (token-refresh tick, scheduled cleanup).

tenant_id: Option<String>

Active org / tenant when the action happened — set when the caller’s session had tenant_id.

ip: Option<String>

Source IP of the request. Apps with a CDN should ensure this is the REAL client IP (X-Forwarded-For has been parsed).

user_agent: Option<String>

Truncated User-Agent string. Cap at 256 chars at write time.

success: bool

True iff action succeeded. Failed-login events are still logged with success=false so SIEM can spot brute force.

reason: Option<String>

Free-form short reason on failure (“WRONG_PASSWORD”, “RATE_LIMITED”). Plain strings — no template interpolation.

metadata: HashMap<String, String>

Stringly-typed structured metadata. Avoid putting secrets here; the audit log is meant to be readable by ops.

Trait Implementations

impl Clone for AuditEvent

fn clone(&self) -> AuditEvent

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditEvent

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuditEvent

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for AuditEvent

fn eq(&self, other: &AuditEvent) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AuditEvent

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for AuditEvent

impl StructuralPartialEq for AuditEvent