From 25062b89428b969e00be3c561fa9a29fb026a582 Mon Sep 17 00:00:00 2001 From: Chris Date: Fri, 8 May 2026 11:50:19 +0200 Subject: [PATCH] Improved ExternalSessionFeedback audit --- CHANGES.rst | 3 ++- src/imio/esign/services/external_session_feedback.py | 6 +++++- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/CHANGES.rst b/CHANGES.rst index de8adb9..e6d86dd 100644 --- a/CHANGES.rst +++ b/CHANGES.rst @@ -5,7 +5,8 @@ Changelog 1.0b9 (unreleased) ------------------ -- Nothing changed yet. +- Improved ExternalSessionFeedback audit. + [chris-adam] 1.0b8 (2026-05-08) diff --git a/src/imio/esign/services/external_session_feedback.py b/src/imio/esign/services/external_session_feedback.py index 2bbec91..6ac1dfc 100644 --- a/src/imio/esign/services/external_session_feedback.py +++ b/src/imio/esign/services/external_session_feedback.py @@ -85,7 +85,10 @@ def reply(self): # noqa C901 if session_update: session.update(session_update) session["last_update"] = datetime.now() - audit("session_feedback", "session={} code={} db_state={}".format(session_id, code, db_state)) + audit( + "session_feedback", + 'session={} code={} db_state={} data="{}"'.format(session_id, code, db_state, data), + ) except Exception as e: self.request.response.setStatus(500) @@ -104,5 +107,6 @@ def _authorized(self): return verify_auth_token(token, groups=["access_imio-apps-docs"]) def check_permission(self): + """Override the default permission check to implement token-based authentication.""" if not self._authorized(): raise Unauthorized("Unauthorized: Invalid or missing authentication token")