6 Commits

Include renames

Author	SHA1	Message	Date
tomas.kracmar	3761aa6d74	feat(tags): add bulk tagging and tag-based filtering ... - Add include_tags/exclude_tags query params to /api/events - Add POST /api/events/bulk-tags endpoint with append/replace modes - Frontend: add Include tags / Exclude tags filter inputs - Frontend: add Bulk tag matching button with prompt for tag and mode - Update filter layout to accommodate new tag fields - Add tests for tag filtering and bulk tag append/replace	2026-04-16 18:50:57 +02:00
tomas.kracmar	82bafc06c9	fix(auth): resolve JWT InvalidSignatureError and improve frontend UX ... - Fix auth by using idToken fallback when accessToken audience mismatches - Add PyJWT verification with audience-aware token selection in frontend - Source health: track last_attempt_time and error status per source - Frontend: fix modal outside x-data scope, add circular-safe JSON stringify - Frontend: support multi-select service filter with All/None toggles - Frontend: improve filter layout into organized rows - Frontend: fix text overflow and result pill colors (success/succeeded) - Intune: normalize application actors (auditActorType=Application) - Add cache-control middleware for HTML/API responses - Update tests for multi-service filtering and source health	2026-04-16 11:32:45 +02:00
tomas.kracmar	ed310a06de	fix: replace python-jose with PyJWT for robust JWKS signature verification ... python-jose failed to correctly construct RSA public keys from Microsoft JWKS entries lacking an explicit alg field, causing signature verification failures. Switch auth.py to PyJWT + jwt.algorithms.RSAAlgorithm.from_jwk() which handles Entra JWKS correctly. Add cryptography explicitly to deps. Update auth tests to remove unused python-jose fixture code.	2026-04-14 16:47:54 +02:00
tomas.kracmar	b35cac42e0	feat: implement Phase 4 enhancements ... - Migrate frontend to Alpine.js for reactive state management - Add source health dashboard in UI and /api/source-health endpoint - Add event tagging (PATCH /api/events/{id}/tags) and commenting (POST /api/events/{id}/comments) - Add CSV/JSON export from the UI - Add rule-based alerting engine (rules.py) with CRUD endpoints (/api/rules) - Add SIEM export via webhook (siem.py) - Add AOC audit trail middleware logging all mutations to aoc_audit collection - Update config with SIEM_ENABLED, SIEM_WEBHOOK_URL, ALERTS_ENABLED - Add tests for rules engine, tags, comments, and source health	2026-04-14 15:38:39 +02:00
tomas.kracmar	b0198012eb	feat: implement Phase 3 scaling ... - Replace skip-based pagination with cursor-based pagination (timestamp|_id cursors) - Add Prometheus /metrics endpoint with request latency, fetch volume, and error counters - Implement incremental fetch watermarking per source (watermarks collection in MongoDB) - Add Graph change notification webhook endpoint (/api/webhooks/graph) - Add correlation ID middleware for distributed tracing (x-request-id header) - Update frontend to use cursor-based pagination with Prev/Next navigation - Update tests for cursor pagination, metrics, webhooks, and watermark mocking	2026-04-14 14:58:50 +02:00
tomas.kracmar	9271b4e461	feat: implement Phase 2 stabilization ... - Cache Graph API tokens with expiry-aware reuse in graph/auth.py - Add tenacity-based retry/backoff wrapper (utils/http.py) and apply to all Graph/source API calls - Add Pydantic request/response models (models/api.py) and FastAPI query constraints - Add unit tests for event_model, auth and integration tests for API endpoints - Configure ruff linter/formatter in pyproject.toml - Add GitHub Actions CI pipeline (.github/workflows/ci.yml) - Add requirements-dev.txt with pytest, mongomock, httpx, ruff - Clean up typing imports and fix ruff linting across codebase	2026-04-14 12:02:28 +02:00