Audit Log

Aero2 records audit events for security-relevant actions: logins, logouts, role changes, client modifications, and more. Audit logs are scoped per application — each app only sees its own events. All audit endpoints require admin access.

Event Types

Common event types include:

Event	Description
`user_login`	User authenticated
`user_logout`	User signed out
`session_revoked`	Single session revoked
`session_revoked_all`	All sessions revoked
`client_created`	OAuth client registered
`client_deleted`	OAuth client removed
`role_assigned`	Role assigned to user
`role_removed`	Role removed from user
`idp_created`	Identity provider configured