cqrenet/aoc
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 31 Wiki Activity
25 Commits 1 Branch 41 Tags
52f565b647819a89a928558b90713b26ef10d238
Commit Graph
9 Commits
Author SHA1 Message Date
tomas.kracmar 52f565b647 style: apply ruff formatting to tests/test_rules.py
CI / lint-and-test (push) Failing after 24s
Details
2026-04-16 19:01:24 +02:00
tomas.kracmar 9774277bd0 fix(tests): defer rules import in test_rules.py to avoid CI db init error
CI / lint-and-test (push) Failing after 29s
Details
2026-04-16 19:00:20 +02:00
tomas.kracmar 4713b43afe style: apply ruff formatting to all backend files
CI / lint-and-test (push) Failing after 38s
Details
2026-04-16 18:58:41 +02:00
tomas.kracmar 3761aa6d74 feat(tags): add bulk tagging and tag-based filtering
CI / lint-and-test (push) Failing after 1m24s
Details 
- Add include_tags/exclude_tags query params to /api/events
- Add POST /api/events/bulk-tags endpoint with append/replace modes
- Frontend: add Include tags / Exclude tags filter inputs
- Frontend: add Bulk tag matching button with prompt for tag and mode
- Update filter layout to accommodate new tag fields
- Add tests for tag filtering and bulk tag append/replace
 2026-04-16 18:50:57 +02:00
tomas.kracmar 82bafc06c9 fix(auth): resolve JWT InvalidSignatureError and improve frontend UX
CI / lint-and-test (push) Has been cancelled
Details 
- Fix auth by using idToken fallback when accessToken audience mismatches
- Add PyJWT verification with audience-aware token selection in frontend
- Source health: track last_attempt_time and error status per source
- Frontend: fix modal outside x-data scope, add circular-safe JSON stringify
- Frontend: support multi-select service filter with All/None toggles
- Frontend: improve filter layout into organized rows
- Frontend: fix text overflow and result pill colors (success/succeeded)
- Intune: normalize application actors (auditActorType=Application)
- Add cache-control middleware for HTML/API responses
- Update tests for multi-service filtering and source health
 2026-04-16 11:32:45 +02:00
tomas.kracmar ed310a06de fix: replace python-jose with PyJWT for robust JWKS signature verification
CI / lint-and-test (push) Has been cancelled
Details 
python-jose failed to correctly construct RSA public keys from Microsoft
JWKS entries lacking an explicit alg field, causing signature verification
failures. Switch auth.py to PyJWT + jwt.algorithms.RSAAlgorithm.from_jwk()
which handles Entra JWKS correctly. Add cryptography explicitly to deps.
Update auth tests to remove unused python-jose fixture code.
 2026-04-14 16:47:54 +02:00
tomas.kracmar b35cac42e0 feat: implement Phase 4 enhancements
CI / lint-and-test (push) Has been cancelled
Details 
- Migrate frontend to Alpine.js for reactive state management
- Add source health dashboard in UI and /api/source-health endpoint
- Add event tagging (PATCH /api/events/{id}/tags) and commenting (POST /api/events/{id}/comments)
- Add CSV/JSON export from the UI
- Add rule-based alerting engine (rules.py) with CRUD endpoints (/api/rules)
- Add SIEM export via webhook (siem.py)
- Add AOC audit trail middleware logging all mutations to aoc_audit collection
- Update config with SIEM_ENABLED, SIEM_WEBHOOK_URL, ALERTS_ENABLED
- Add tests for rules engine, tags, comments, and source health
 2026-04-14 15:38:39 +02:00
tomas.kracmar b0198012eb feat: implement Phase 3 scaling
CI / lint-and-test (push) Has been cancelled
Details 
- Replace skip-based pagination with cursor-based pagination (timestamp|_id cursors)
- Add Prometheus /metrics endpoint with request latency, fetch volume, and error counters
- Implement incremental fetch watermarking per source (watermarks collection in MongoDB)
- Add Graph change notification webhook endpoint (/api/webhooks/graph)
- Add correlation ID middleware for distributed tracing (x-request-id header)
- Update frontend to use cursor-based pagination with Prev/Next navigation
- Update tests for cursor pagination, metrics, webhooks, and watermark mocking
 2026-04-14 14:58:50 +02:00
tomas.kracmar 9271b4e461 feat: implement Phase 2 stabilization
CI / lint-and-test (push) Has been cancelled
Details 
- Cache Graph API tokens with expiry-aware reuse in graph/auth.py
- Add tenacity-based retry/backoff wrapper (utils/http.py) and apply to all Graph/source API calls
- Add Pydantic request/response models (models/api.py) and FastAPI query constraints
- Add unit tests for event_model, auth and integration tests for API endpoints
- Configure ruff linter/formatter in pyproject.toml
- Add GitHub Actions CI pipeline (.github/workflows/ci.yml)
- Add requirements-dev.txt with pytest, mongomock, httpx, ruff
- Clean up typing imports and fix ruff linting across codebase
 2026-04-14 12:02:28 +02:00