Admin Audit Verify

curl --request GET \
  --url https://{host}/api/admin/audit/verify \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://{host}/api/admin/audit/verify', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://{host}/api/admin/audit/verify",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://{host}/api/admin/audit/verify"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://{host}/api/admin/audit/verify")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "ok": true,
  "chain_version": 123,
  "checked": 123,
  "unchained": 123,
  "first_seq": 123,
  "last_seq": 123,
  "broken_at": 123,
  "reason": "",
  "missing": []
}

Admin Audit Verify

Recompute the audit hash chain and report what it found.

The endpoint an assessor is shown, and the one that makes the chain worth having: a chain nobody checks proves nothing. unchained is not a fault — it counts rows written before the chain existed, which can never join it without inventing evidence for a period nothing vouched for.

Deliberately not gated on require_admin: an administrator verifying the record of their own actions is exactly the arrangement the auditor role exists to break.

GET

api

admin

audit

verify

Admin Audit Verify

curl --request GET \
  --url https://{host}/api/admin/audit/verify \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://{host}/api/admin/audit/verify', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://{host}/api/admin/audit/verify",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://{host}/api/admin/audit/verify"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://{host}/api/admin/audit/verify")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "ok": true,
  "chain_version": 123,
  "checked": 123,
  "unchained": 123,
  "first_seq": 123,
  "last_seq": 123,
  "broken_at": 123,
  "reason": "",
  "missing": []
}

授权

Authorization

string

header

必填

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

响应

200 - application/json

Successful Response

The result of walking the audit hash chain.

ok is the headline; the rest exists so a failure can be acted on. reason is prose for a human, broken_at and missing are what to go and look at.

boolean

必填

chain_version

integer

必填

checked

integer

必填

Rows whose hash was recomputed and matched

unchained

integer

必填

Rows written before the chain existed; not a fault

first_seq

integer | null

last_seq

integer | null

broken_at

integer | null

First row that failed; the tail after it is also invalid

reason

string

默认值:""

missing

integer[]

开始

接口

Admin Audit Verify

授权

响应