User story

As a security administrator,

I want to log and audit OIDC authentication events,

So that I can monitor and troubleshoot authentication-related issues.

Problem description

It is difficult to track authentication attempts and troubleshoot issues without proper logging.

Acceptance criteria

• Authentication attempts (success/failure) are logged.

• Logs include relevant details such as user identity, token expiration, and roles.

• Logs are compatible with existing Percona auditing mechanisms (schema).

• Ensure logs comply with security best practices (no sensitive data leakage).

• Integrate with MongoDB audit logging mechanisms.

Design / Solution Proposal

• Implement structured logging for OIDC authentication events - based on current implementation