v0.8.3
Released
Feature
Comprehensive Audit Logging & OIDC Brand Icons
Major expansion of the audit trail system covering all critical platform actions for GDPR/SOC2 compliance, OIDC provider brand icons, and fixes for date formatting localization and data availability routing.
- Audit logging for log access, auth events, identity management, provider config, settings, and sessions
- OIDC login page shows brand icons for well-known providers (Google, Microsoft, GitHub, GitLab, Okta, Auth0, Keycloak, Authentik)
- Backend auto-detects OIDC provider icon from issuer URL
- Date/number formatting now respects user's browser/system locale
- Fixed data-availability endpoint for ClickHouse and MongoDB storage engines
Added
- Comprehensive Audit Logging: major expansion of the audit trail system to cover all critical platform actions for improved compliance (GDPR/SOC2) and security monitoring.
- Log Access Auditing: every log search, trace view, context lookup, single log detail view, and live stream connection is now recorded with user identity, IP address, and query parameters.
- External Authentication Auditing: successful logins via OIDC and LDAP providers are now tracked, including new user registration events.
- Identity Management Auditing: linking and unlinking of external identities (Google, GitHub, LDAP, etc.) to user accounts is now recorded.
- Authentication Provider Auditing: all administrative actions on auth providers (create, update, delete, reorder) are now fully audited with configuration change summaries.
- System Settings Auditing: any changes to global platform settings (auth mode, signup status, default users) are now tracked with before/after metadata.
- Session Auditing: viewing of active session lists and individual session event timelines is now recorded.
- Audit metadata now includes detailed context like search queries (
q), filter parameters, and updated keys for configuration changes.
- OIDC login page now shows brand icons for well-known providers (Google, Microsoft/Azure, GitHub, GitLab, Okta, Auth0, Keycloak, Authentik); unknown providers fall back to the generic icon
- Backend auto-detects the provider icon from the issuer URL when creating or updating an OIDC provider, with name/slug matching as fallback for self-hosted setups
Fixed
- Date and number formatting localization: removed hardcoded locales (
it-IT,en-US) from the frontend (SIEM, Search, Admin, etc.) to ensure the application automatically respects the user’s browser/system language settings. GET /api/v1/projects/data-availabilityreturnedlogs: [](and incorrect traces/metrics) whenSTORAGE_ENGINE=clickhouseormongodb; the endpoint now routes all three checks through the reservoir so they hit the correct backend