gendesign

Author	SHA1	Message	Date
bot-backend	5025732d12	fix(tradein/audit): exclude /api/v1/admin/* from api_request events All checks were successful CI Trade-In / changes (pull_request) Successful in 7s Details CI / changes (pull_request) Successful in 7s Details CI Trade-In / frontend-checks (pull_request) Has been skipped Details CI / backend-tests (pull_request) Has been skipped Details CI / frontend-tests (pull_request) Has been skipped Details CI / openapi-codegen-check (pull_request) Has been skipped Details CI Trade-In / backend-tests (pull_request) Successful in 4m52s Details Admin viewing the audit/analytics dashboards hits /api/v1/admin/* which the request-audit middleware logged as api_request — polluting top_paths and activity counts with the dashboards' own traffic. Skip api_request for admin paths; keep login (admin sign-in from an IP is still valid audit).	2026-07-13 23:49:13 +03:00
lekss361	32037af6de	feat(tradein/audit): request-audit middleware + estimate_request logging → user_events (#2519 ) All checks were successful Deploy Trade-In / changes (push) Successful in 11s Details Deploy Trade-In / build-browser (push) Has been skipped Details Deploy Trade-In / build-frontend (push) Has been skipped Details Deploy Trade-In / test (push) Successful in 48s Details Deploy Trade-In / build-backend (push) Successful in 1m0s Details Deploy Trade-In / deploy (push) Successful in 51s Details RequestAuditMiddleware logs api_request + deduped login per authenticated /api/* request; estimate() logs estimate_request with address. Fire-and-forget, never blocks/breaks the request. Writes to user_events (Feature 2/3 capture).	2026-07-13 20:09:22 +00:00

2 commits