krishicks 9c6867ccec feat(auth): emit OCSF events for credential-less gateway requests (#4632) ...

Requests the gateway rejects before consulting any authenticator now emit
an OCSF Authentication [3002] event: no credential presented, mTLS
required without a client certificate, or an operator certificate
combined with an authorization header. Each event carries a reason
category in status_detail and never the presented credential. The
response returned to the caller is unchanged.

openshell-ocsf gains the Authentication class with user and service
objects, and a shared OcsfCapture test layer. Schema validation now
rejects attributes the class does not define and profile attributes
whose profile the event does not declare.

Refs #2912

Signed-off-by: Kris Hicks <khicks@nvidia.com>

2026-10-16 17:17:21 +00:00

..

accessing-logs.mdx

fix(supervisor): rename OCSF log files from .log to .jsonl (#4263)

2026-10-14 16:59:36 +00:00

gateway-metrics.mdx

docs(observability): add observability overview and traces pages (#4560)

2026-10-14 21:53:27 +00:00

logging.mdx

feat(auth): emit OCSF events for credential-less gateway requests (#4632)

2026-10-16 17:17:21 +00:00

ocsf-json-export.mdx

feat(auth): emit OCSF events for credential-less gateway requests (#4632)

2026-10-16 17:17:21 +00:00

overview.mdx

docs(observability): add observability overview and traces pages (#4560)

2026-10-14 21:53:27 +00:00

telemetry.mdx

chore(build): remove bundled Z3 support (#3275)

2026-10-01 12:08:33 +00:00

traces.mdx

docs(observability): add observability overview and traces pages (#4560)

2026-10-14 21:53:27 +00:00