Skip to content

Retrieve real-time user authentication and session audit logs
deprecated

Request

This is deprecated; use /v2/audit/auth instead.

Requires audits::read:user permission.

Security
JWTAuthorizer
curl -i -X GET \
  https://apidocs.trustgrid.io/_mock/audit/tail/user \
  -H 'Authorization: Bearer <YOUR_JWT_HERE>'

Responses

OK

Bodyapplication/json
Array [
uidstring

Unique identifier

userIdstring

User who performed the authentication

Example:"admin@example.com"
messagestring

Human-readable description (e.g. "Portal login (Local Authentication)")

sourcestring

Authentication source (e.g. "portal")

ipstring

IP address of the client

timestampinteger

Unix epoch timestamp (seconds) when the event occurred

expiresinteger

Unix epoch timestamp (seconds) when this audit record expires

orgIdstring

Organization ID

typestring

Object type discriminator

Example:"AuthAudit"
]
Response
[
  {
    "uid": "string",
    "userId": "admin@example.com",
    "message": "string",
    "source": "string",
    "ip": "string",
    "timestamp": 0,
    "expires": 0,
    "orgId": "string",
    "type": "AuthAudit"
  }
]