Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add log-in and authentication to Log interface #346

Open
mihai169 opened this issue Feb 6, 2025 · 2 comments
Open

Add log-in and authentication to Log interface #346

mihai169 opened this issue Feb 6, 2025 · 2 comments

Comments

@mihai169
Copy link
Collaborator

mihai169 commented Feb 6, 2025

Description:
In order to view logs interface in the Eliza UI a user must authenticate. A list of accounts @Sifchain.finance should be allowed as admins who can view all logs.
Later on logged users should be able to see their logs only - this will have as pre-requisite wallet and twitter log in in the Eliza UI.

Acceptance Criteria:

Feature: Logs Interface Access Control
As a system administrator
I want users to authenticate before accessing logs
So that only authorized users can view relevant logs securely

Background:
Given the Eliza UI has a logs interface
And a list of admin accounts under "@Sifchain.finance" is pre-configured
And a user must authenticate to access logs

Scenario: Require authentication to access logs interface
Given a user is not authenticated
When they try to access the logs interface
Then the system denies access
And displays an "Authentication required" message

Scenario: Admin access to all logs
Given a user is authenticated
And their email belongs to "@Sifchain.finance"
When they access the logs interface
Then they can view all system logs

Scenario: Regular user access to personal logs
Given a user is authenticated
And they are not an admin
When they access the logs interface
Then they can only view logs related to their own account

Scenario: Unauthorized user attempts to access logs
Given a user is authenticated
And they are not an admin
When they attempt to access logs of other users
Then the system denies access
And displays an "Access denied" message

Scenario: Logout revokes access
Given a user is authenticated
And they have accessed the logs interface
When they log out
Then they can no longer access the logs interface
And the system redirects them to the login page

Scenario: Admin user searching logs
Given an admin user is authenticated
When they enter a search term in the logs interface
Then the system returns relevant logs from all users

Scenario: Regular user searching logs
Given a regular user is authenticated
When they enter a search term in the logs interface
Then the system returns relevant logs related to their account only

Scenario Outline: Failed authentication prevents log access
Given a user attempts to log in with ""
When they try to access the logs interface
Then the system denies access
And displays ""

Examples:
  | Invalid Credential Type | Error Message                  |
  | Wrong password         | "Invalid credentials"          |
  | Expired session        | "Session expired, please log in again" |
  | Unauthorized email     | "Access restricted to authorized users" |

Scenario: Admin revokes user access
Given an admin user is authenticated
And a regular user exists in the system
When the admin revokes the user's access
Then the user can no longer view their logs
And the system displays an "Access revoked" message

@mihai169
Copy link
Collaborator Author

for now we can leave interface without log-in for normal users but have admin log-in on the settings were logs can be viewed and allow siffchain.finance accounts. @VisionOra @ArsalonAmini2024 what do you think ?

Copy link

This issue has been automatically marked as stale due to 30 days of inactivity.
If no further activity occurs within 7 days, it will be closed automatically. Please take action if this issue is still relevant.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants