http://hg.omfa.de/prosody-modules/ en-us prosody-modules: mod_audit/mod_audit.lua history mod_audit/mod_audit.lua revision history mod_audit: Fix argument declaration of --limit http://hg.omfa.de/prosody-modules/log/9102d75131e4/mod_audit/mod_audit.lua Kim Alvefur <zash@zash.se> Tue, 15 Jul 2025 12:21:23 +0200 mod_audit: Fix querying for both user and global events http://hg.omfa.de/prosody-modules/log/6c0570a8b866/mod_audit/mod_audit.lua
Forgot to fix this before I pushed]]> Kim Alvefur <zash@zash.se> Sat, 02 Dec 2023 13:35:29 +0100 mod_audit: Fix error due to sub-second precision timestamps http://hg.omfa.de/prosody-modules/log/754f8eaad34c/mod_audit/mod_audit.lua
os.date() does not handle them]]> Kim Alvefur <zash@zash.se> Sat, 02 Dec 2023 12:30:28 +0100 mod_audit: Update command to handle storing JIDs instead of only usernames http://hg.omfa.de/prosody-modules/log/08a635862201/mod_audit/mod_audit.lua Kim Alvefur <zash@zash.se> Sat, 02 Dec 2023 11:48:19 +0100 mod_audit: Use new module API for period/time ranges http://hg.omfa.de/prosody-modules/log/1bdc6b5979ee/mod_audit/mod_audit.lua
It was added around the same time as the parse_duration function]]> Kim Alvefur <zash@zash.se> Sun, 26 Nov 2023 21:51:12 +0100 mod_audit: Replace argument parsing debug print() with debug logging http://hg.omfa.de/prosody-modules/log/c77010f25b14/mod_audit/mod_audit.lua
prosodyctl -v to view]]> Kim Alvefur <zash@zash.se> Tue, 14 Nov 2023 16:01:33 +0100 mod_audit: Fix storing IP prefixes http://hg.omfa.de/prosody-modules/log/c782f220b3ee/mod_audit/mod_audit.lua
Was essentially calling new_ip(new_ip())]]> Kim Alvefur <zash@zash.se> Mon, 13 Nov 2023 16:55:12 +0100 mod_audit: Fix showing session details in module command http://hg.omfa.de/prosody-modules/log/15c1801e8901/mod_audit/mod_audit.lua
The namespaced session element was not accounted for.]]> Kim Alvefur <zash@zash.se> Mon, 13 Nov 2023 12:37:21 +0100 mod_audit: Also record human-readable name of country http://hg.omfa.de/prosody-modules/log/0c9606770db1/mod_audit/mod_audit.lua
Nicer to show in graphs but less machine-usable

Throw in continent in case that turns out to be useful one day]]> Kim Alvefur <zash@zash.se> Mon, 13 Nov 2023 12:22:17 +0100 mod_audit: Fix recording location info http://hg.omfa.de/prosody-modules/log/37ba9478b387/mod_audit/mod_audit.lua
The method :query_by_addr only works for IPv4, even if you open the IPv6
database, which is an odd API. It also returns a table, not a string.]]> Kim Alvefur <zash@zash.se> Mon, 13 Nov 2023 12:14:31 +0100 mod_audit: Parse IP into util.ip object once and reuse http://hg.omfa.de/prosody-modules/log/9a5fca9f90a6/mod_audit/mod_audit.lua
Mostly for my own sanity]]> Kim Alvefur <zash@zash.se> Mon, 13 Nov 2023 12:05:17 +0100 mod_audit: Pass IP address in string form http://hg.omfa.de/prosody-modules/log/655f90b149a4/mod_audit/mod_audit.lua
Passing an util.ip object to :text_tag() would be an error.]]> Kim Alvefur <zash@zash.se> Mon, 13 Nov 2023 12:02:54 +0100 mod_audit: Fix use of util.ip http://hg.omfa.de/prosody-modules/log/9bbf5b0673a2/mod_audit/mod_audit.lua
Yes, weirdly named 'new' function]]> Kim Alvefur <zash@zash.se> Mon, 13 Nov 2023 11:36:56 +0100 mod_audit: Move underscore to avoid luacheck warning http://hg.omfa.de/prosody-modules/log/c35f3c1762b5/mod_audit/mod_audit.lua
Underscore as prefix is taken as a signal that the variable is unused,
but then it is used and luacheck makes noise about that.]]> Kim Alvefur <zash@zash.se> Mon, 17 Apr 2023 08:26:20 +0200 mod_audit: Add expiration of entries, and handling of full archive stores http://hg.omfa.de/prosody-modules/log/e00e3e2c72a3/mod_audit/mod_audit.lua Matthew Wild <mwild1@gmail.com> Fri, 07 Apr 2023 15:21:54 +0100 mod_audit: Add 'note' column http://hg.omfa.de/prosody-modules/log/7e3862a26e55/mod_audit/mod_audit.lua Matthew Wild <mwild1@gmail.com> Fri, 07 Apr 2023 13:46:29 +0100 mod_audit: Improve filtering options and add documentation to README http://hg.omfa.de/prosody-modules/log/dc058fcc3fe3/mod_audit/mod_audit.lua Matthew Wild <mwild1@gmail.com> Fri, 07 Apr 2023 13:44:18 +0100 mod_audit: Add some control over output columns via command-line flags http://hg.omfa.de/prosody-modules/log/11b37063d80a/mod_audit/mod_audit.lua Matthew Wild <mwild1@gmail.com> Fri, 07 Apr 2023 13:25:34 +0100 mod_audit: Let util.human.io pick a suitable default width http://hg.omfa.de/prosody-modules/log/400ffa842576/mod_audit/mod_audit.lua
It supports better width detection now.]]> Matthew Wild <mwild1@gmail.com> Fri, 07 Apr 2023 13:10:20 +0100 mod_audit: Use proportional columns in table output http://hg.omfa.de/prosody-modules/log/eb832553d635/mod_audit/mod_audit.lua Matthew Wild <mwild1@gmail.com> Fri, 07 Apr 2023 13:09:51 +0100 mod_audit: Fix iteration of custom payloads to use ipairs http://hg.omfa.de/prosody-modules/log/d02f465e2aff/mod_audit/mod_audit.lua Matthew Wild <mwild1@gmail.com> Fri, 07 Apr 2023 13:09:31 +0100 mod_audit: Display most recent entries first, rather than showing oldest http://hg.omfa.de/prosody-modules/log/5043108b14f4/mod_audit/mod_audit.lua
This matches the output of 'lastb'.]]> Matthew Wild <mwild1@gmail.com> Fri, 07 Apr 2023 12:03:29 +0100 mod_audit: Minor style nit http://hg.omfa.de/prosody-modules/log/c5ecfb06afde/mod_audit/mod_audit.lua Matthew Wild <mwild1@gmail.com> Fri, 07 Apr 2023 12:00:31 +0100 mod_audit: Allow caller to specify time of the event http://hg.omfa.de/prosody-modules/log/0091b7de2763/mod_audit/mod_audit.lua Matthew Wild <mwild1@gmail.com> Fri, 07 Apr 2023 12:00:06 +0100 mod_audit: Add a command to print the audit log on the command-line http://hg.omfa.de/prosody-modules/log/e3a3a6c86a9f/mod_audit/mod_audit.lua Matthew Wild <mwild1@gmail.com> Sat, 01 Apr 2023 13:22:12 +0100 mod_audit: Support for adding location (GeoIP) to audit events http://hg.omfa.de/prosody-modules/log/12f7d8b901e0/mod_audit/mod_audit.lua
This can be more privacy-friendly than logging full IP addresses, and also
more informative to a user - IP addresses don't mean much to the average
person, however if they see activity from outside their expected country, they
can immediately identify suspicious activity.

As with IPs, this field is configurable for deployments that would like to
disable it. Location is also not logged when the geoip library is not
available.]]> Matthew Wild <mwild1@gmail.com> Sat, 01 Apr 2023 13:11:53 +0100 mod_audit: Allow disabling IP logging, or limiting it to a prefix http://hg.omfa.de/prosody-modules/log/f3123cbbd894/mod_audit/mod_audit.lua Matthew Wild <mwild1@gmail.com> Tue, 14 Mar 2023 18:59:39 +0000 mod_audit: Include client id in audit log entries (if known) http://hg.omfa.de/prosody-modules/log/d9577083c5f5/mod_audit/mod_audit.lua Matthew Wild <mwild1@gmail.com> Tue, 14 Mar 2023 17:48:44 +0000 mod_audit: remove event hook http://hg.omfa.de/prosody-modules/log/4a5837591380/mod_audit/mod_audit.lua
Let's keep it simple for now---also we expose the audit
functionality on the moduleapi level anyway.]]> Jonas Schäfer <jonas@wielicki.name> Thu, 28 Apr 2022 20:22:03 +0200 mod_audit: make the extension of the module API less of a hack http://hg.omfa.de/prosody-modules/log/ae83200fb55f/mod_audit/mod_audit.lua
Thanks, Zash, for making me look at mod_http.]]> Jonas Schäfer <jonas@wielicki.name> Tue, 26 Apr 2022 22:42:09 +0200 mod_audit*: fix luacheck warnings http://hg.omfa.de/prosody-modules/log/08dea42a302a/mod_audit/mod_audit.lua Jonas Schäfer <jonas@wielicki.name> Tue, 26 Apr 2022 22:37:13 +0200 mod_audit*: modules for audit logging in prosody http://hg.omfa.de/prosody-modules/log/530d116b7f68/mod_audit/mod_audit.lua
These are to be seen as proof-of-concept for now.]]> Jonas Schäfer <jonas@wielicki.name> Tue, 26 Apr 2022 22:32:44 +0200