feat(firewall): complete rule-match audit context

Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>
2026-07-30 22:46:27 -04:00
parent abc5bfcccc
commit 12037da367
6 changed files with 144 additions and 1 deletions
@@ -201,7 +201,8 @@ class FirewallService
    public function logSecurityEvent(SecurityEvent $event): void
    {
        $tenantId = $event->getTenantId() ?? $this->tenantContext->identifier();
-        if (!$tenantId) {
+        $ruleScope = $event->get('ruleScope');
+        if (!$tenantId && $ruleScope !== FirewallRuleObject::SCOPE_SYSTEM) {
            return;
        }

@@ -214,6 +215,8 @@ class FirewallService
            ->setRequestMethod($event->getRequestMethod())
            ->setEventType($this->mapEventToLogType($event->getName()))
            ->setResult($this->mapEventToResult($event->getName()))
+            ->setRuleId($event->get('ruleId'))
+            ->setRuleScope($ruleScope)
            ->setIdentityId($event->getUserId())
            ->setTimestamp(new \DateTimeImmutable())
            ->setMetadata($event->getData());
@@ -261,6 +264,7 @@ class FirewallService
            $ipAddress,
            $deviceFingerprint,
            $rule->getId(),
+            $rule->getScope(),
            $rule->getReason()
        );
        $event->setTenantId($this->tenantContext->identifier());