Get Audit Logs
Retrieve audit logs as a cursor-paginated list. Results can be filtered by time range, event type, and organization.
Full description
Full description
limit entries together with a nextCursor value.
Entries sharing the same timestamp are never split across pages, so a page may occasionally
contain more than limit entries. To fetch the next page, repeat the request with the cursor
parameter set to the nextCursor value from the previous response, keeping the other filter
parameters unchanged. nextCursor is absent on the last page. If both before and cursor
are provided, cursor takes precedence.This endpoint is hosted on the Authlete IdP server (https://login.authlete.com),
not on the regional API clusters.Authorizations
Authenticate every request with a Service Access Token or Organization Token.
Set the token value in the Authorization: Bearer <token> header.
Service Access Token: Scoped to a single service. Use when automating service-level configuration or runtime flows.
Organization Token: Scoped to the organization; inherits permissions across services. Use for org-wide automation or when managing multiple services programmatically.
Both token types are issued by the Authlete console or provisioning APIs.
Query Parameters
Return logs after this timestamp (ISO 8601).
Return logs before this timestamp (ISO 8601).
Filter by event type (e.g. service.create, security.login, client.create).
Can be specified multiple times. The set of available event types is environment-specific
and includes server-side types; retrieve the full list from the /api/audit/types endpoint.
The organization to retrieve audit logs for. Not required when authenticating with an organization token — the token's own organization is used, and a differing value is rejected. Required for user access tokens, unless the user is an Authlete administrator (administrators may omit it to query across all organizations).
The maximum number of entries to return per page. Values outside the allowed range are clamped; the effective value is echoed back in the response.
1 <= x <= 1000An opaque cursor returned as nextCursor by a previous response. When provided, it takes
precedence over the before parameter.
Response
A page of audit log entries matching the query.
The audit log entries on this page, in reverse chronological order. Entries sharing the
same timestamp are never split across pages, so a page may contain more than limit entries.
An opaque cursor pointing at the next page. Pass this value as the cursor parameter of the
next request to fetch the following page. Absent or null on the last page.
The effective page size limit applied to this response. May differ from the requested limit
if the requested value was outside the allowed range.