Integrate Audit Service

[sthanikan2000]

Problem

The systems needs to have the audit trials for all the events. But current system don't have that feature still.

There is a repo LSFLK/argus which can be used integrate the AuditService. But need to check whether it's up to date with the latest implementation of the audit-service in the OpenDIF/opendif-core

Proposed Solution

Need to complete the following checklists:

• AuditService client has a way to say "sign this, and give it back to me". Supports secure signed hash of the original string (non-repudiation). For example, when NPQS approves, NSW will generate hash of the string, sign, and encrypt with private key. To read logs, NPQS app should send decode token
• Write a docker compose setup to create a instance of Audit Service Locally ( This should be come inside a single docker compose file if the issue Create root docker-compose for full local system orchestration #201 finished)
• Create the AuditMiddleware and use it to write the AuditLogs

Alternatives

No response

[ginaxu1]

Non repudiation: LSFLK/argus#3