boban
/
clusev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(tls): audit TLS-mode changes in applyTlsMode (covers direct Livewire calls, no double-audit) 

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
feat/v1-foundation
boban 2026-06-14 22:49:31 +02:00
parent 923e0d4e1c
commit 991e17fcee
2 changed files with 24 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
app/Livewire/System/Index.php
View File

@ -2,8 +2,10 @@
namespace App\Livewire\System;
use App\Models\AuditEvent;
use App\Models\Setting;
use App\Services\DeploymentService;
use Illuminate\Support\Facades\Auth;
use Livewire\Attributes\Layout;
use Livewire\Attributes\On;
use Livewire\Component;
@ -173,8 +175,6 @@ class Index extends Component
'confirmLabel' => __('system.change_tls_confirm'),
'danger' => true,
'icon' => 'shield',
'auditAction' => 'system.settings_updated',
'auditTarget' => 'tls_mode='.$mode,
'event' => 'tlsModeChanged',
'params' => ['mode' => $mode],
'notify' => '',
@ -191,6 +191,15 @@ class Index extends Component
$deployment->setTlsMode($mode);
$this->tlsMode = $mode;
AuditEvent::create([
'user_id' => Auth::id(),
'actor' => Auth::user()?->name ?? 'system',
'action' => 'system.settings_updated',
'target' => 'tls_mode='.$mode,
'ip' => request()->ip(),
]);
$this->restartPending = true;
$this->dispatch('notify', message: __('system.tls_saved_notify'));
}

13
tests/Feature/TlsModeToggleTest.php
View File

@ -35,4 +35,17 @@ class TlsModeToggleTest extends TestCase
$this->assertFalse(app(DeploymentService::class)->externalTls());
}
public function test_applying_a_mode_writes_an_audit_event(): void
{
$this->actingAs(User::factory()->create(['must_change_password' => false]));
Livewire::test(Index::class)
->call('applyTlsMode', 'external', app(DeploymentService::class));
$this->assertDatabaseHas('audit_events', [
'action' => 'system.settings_updated',
'target' => 'tls_mode=external',
]);
}
}