Appearance
identity.end-user.audit-query ​
Read the end-user auth audit trail for an organization
Read the end-user auth audit trail (audit_logs, action LIKE 'end_user.%').
Inputs:
- actor: Cognito sub or user UUID
- organization_uuid: owning organization (required)
- identity_app_uuid: narrow to one app (optional; matches extra_data.identity_app_uuid)
- end_user_uuid: narrow to one end-user (optional; matches resource_id)
- since: ISO8601 lower bound on timestamp (optional)
- limit / offset: pagination (optional)
Outputs (terminal state_data):
- items: [{action, actor_uuid, success, reason, email, ip_address, timestamp}]
- total: number of matching rows (before pagination)
Overview ​
| Property | Value |
|---|---|
| Workflow type | Atomic |
| Library | App-identity |
| Version | 1.0 |
Input Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
actor | string | No | — | — |
organization_uuid | uuid | Yes | — | — |
identity_app_uuid | uuid | No | — | — |
end_user_uuid | uuid | No | — | — |
since | string | No | — | — |
limit | integer | No | — | — |
offset | integer | No | — | — |
Output Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
items | list | Yes | — | — |
total | integer | Yes | — | — |
actor | string | No | — | — |
failure_reason | string | No | — | — |
failure_type | string | No | — | — |
failed_action | string | No | — | — |
failed_at_state | string | No | — | — |
reason | string | No | — | — |
States ​
| State | Initial | Terminal | Success | Auto-advance | Description |
|---|---|---|---|---|---|
pending | Yes | No | — | execute | — |
completed | No | Yes | Yes | — | — |
failed | No | Yes | No | — | — |
State Diagram ​
Transitions ​
| From | Action | To | Description |
|---|---|---|---|
pending | execute | completed | — |
* (any state) | fail | failed | — |
API Usage ​
bash
POST /api/workflows/start
Content-Type: application/json
{
"workflow_type": "identity.end-user.audit-query",
"initial_data": {
"organization_uuid": "value"
}
}