Events: Add outbound detail protobufs, request status code, and update event encrypt filter. (#1569)

* feat (events): Add status code to audit events

* feat (events): Add the resp proto msg to every audit event

* chore (events): Update eventlogger dep

This latest version will redact any map and/or map field which isn't
explicitly classified via a Taggable interface

* feat (events): Begin to add tagging to response proto msgs

internal/proto/local/controller/api/resources/authmethods/v1/auth_method.proto

@@ -13,42 +13,43 @@ import "controller/custom_options/v1/options.proto";
 // AuthMethod contains all fields related to an Auth Method resource
 message AuthMethod {
   // Output only. The ID of the Auth Method.
-  string id = 10;
+  string id = 10;  // @gotags: `class:"public"`
 
   // The ID of the Scope of which this Auth Method is a part.
-  string scope_id = 20 [json_name = "scope_id"];
+  string scope_id = 20 [json_name = "scope_id"];  // @gotags: `class:"public"`
 
   // Output only. Scope information for this Auth method.
-  resources.scopes.v1.ScopeInfo scope = 30;
+  resources.scopes.v1.ScopeInfo scope = 30;  // @gotags: `class:"public"`
 
   // Optional name for identification purposes.
-  google.protobuf.StringValue name = 40 [(custom_options.v1.generate_sdk_option) = true, (custom_options.v1.mask_mapping) = { this: "name" that: "Name" }];
+  google.protobuf.StringValue name = 40 [(custom_options.v1.generate_sdk_option) = true, (custom_options.v1.mask_mapping) = { this: "name" that: "Name" }];  // @gotags: `class:"public"`
 
   // Optional user-set description for identification purposes.
-  google.protobuf.StringValue description = 50 [(custom_options.v1.generate_sdk_option) = true, (custom_options.v1.mask_mapping) = { this: "description" that: "Description" }];
+  google.protobuf.StringValue description = 50
+      [(custom_options.v1.generate_sdk_option) = true, (custom_options.v1.mask_mapping) = { this: "description" that: "Description" }];  // @gotags: `class:"public"`
 
   // Output only. The time this resource was created.
-  google.protobuf.Timestamp created_time = 60 [json_name = "created_time"];
+  google.protobuf.Timestamp created_time = 60 [json_name = "created_time"];  // @gotags: `class:"public"`
 
   // Output only. The time this resource was last updated.
-  google.protobuf.Timestamp updated_time = 70 [json_name = "updated_time"];
+  google.protobuf.Timestamp updated_time = 70 [json_name = "updated_time"];  // @gotags: `class:"public"`
 
   // Version is used in mutation requests, after the initial creation, to ensure this resource has not changed.
   // The mutation will fail if the version does not match the latest known good version.
-  uint32 version = 80;
+  uint32 version = 80;  // @gotags: `class:"public"`
 
   // The Auth Method type.
-  string type = 90;
+  string type = 90;  // @gotags: `class:"public"`
 
   // The attributes that are applicable for the specific Auth Method type.
   google.protobuf.Struct attributes = 100 [(custom_options.v1.generate_sdk_option) = true];
 
   // Output only. Whether this auth method is the primary auth method for it's scope.
   // To change this value update the primary_auth_method_id field on the scope.
-  bool is_primary = 110 [json_name = "is_primary"];
+  bool is_primary = 110 [json_name = "is_primary"];  // @gotags: `class:"public"`
 
   // Output only. The available actions on this resource for this user.
-  repeated string authorized_actions = 300 [json_name = "authorized_actions"];
+  repeated string authorized_actions = 300 [json_name = "authorized_actions"];  // @gotags: `class:"public"`
 
   // Output only. The authorized actions for the scope's collections.
   map<string, google.protobuf.ListValue> authorized_collection_actions = 310 [json_name = "authorized_collection_actions"];

internal/proto/local/controller/api/resources/scopes/v1/scope.proto

@@ -11,58 +11,62 @@ import "controller/custom_options/v1/options.proto";
 
 message ScopeInfo {
   // Output only. The ID of the Scope.
-  string id = 1;
+  string id = 1;  // @gotags: `class:"public"`
 
   // Output only. The type of the Scope.
-  string type = 2;
+  string type = 2;  // @gotags: `class:"public"`
 
   // Output only. The name of the Scope, if any.
-  string name = 3;
+  string name = 3;  // @gotags: `class:"public"`
 
   // Output only. The description of the Scope, if any.
-  string description = 4;
+  string description = 4;  // @gotags: `class:"public"`
 
   // Output only. The ID of the parent Scope, if any. This field will be empty if this is the "global" scope.
-  string parent_scope_id = 5 [json_name = "parent_scope_id"];
+  string parent_scope_id = 5 [json_name = "parent_scope_id"];  // @gotags: `class:"public"`
 }
 
 // Scope contains all fields related to a Scope resource
 message Scope {
   // Output only. The ID of the Scope.
-  string id = 10;
+  string id = 10;  // @gotags: `class:"public"`
 
   // The ID of the Scope this resource is in. If this is the "global" Scope this field will be empty.
-  string scope_id = 20 [json_name = "scope_id"];
+  string scope_id = 20 [json_name = "scope_id"];  // @gotags: `class:"public"`
 
   // Output only. Scope information for this resource.
   ScopeInfo scope = 30;
 
   // Optional name for identification purposes.
-  google.protobuf.StringValue name = 40 [(custom_options.v1.generate_sdk_option) = true, (custom_options.v1.mask_mapping) = { this: "name" that: "name" }];
+  google.protobuf.StringValue name = 40 [(custom_options.v1.generate_sdk_option) = true, (custom_options.v1.mask_mapping) = { this: "name" that: "name" }];  // @gotags: `class:"public"`
 
   // Optional user-set descripton for identification purposes.
-  google.protobuf.StringValue description = 50 [(custom_options.v1.generate_sdk_option) = true, (custom_options.v1.mask_mapping) = { this: "description" that: "description" }];
+  google.protobuf.StringValue description = 50
+      [(custom_options.v1.generate_sdk_option) = true, (custom_options.v1.mask_mapping) = { this: "description" that: "description" }];  // @gotags: `class:"public"`
 
   // Output only. The time this resource was created.
-  google.protobuf.Timestamp created_time = 60 [json_name = "created_time"];
+  google.protobuf.Timestamp created_time = 60 [json_name = "created_time"];  // @gotags: `class:"public"`
 
   // Output only. The time this resource was last updated.
-  google.protobuf.Timestamp updated_time = 70 [json_name = "updated_time"];
+  google.protobuf.Timestamp updated_time = 70 [json_name = "updated_time"];  // @gotags: `class:"public"`
 
   // Version is used in mutation requests, after the initial creation, to ensure this resource has not changed.
   // The mutation will fail if the version does not match the latest known good version.
-  uint32 version = 80;
+  uint32 version = 80;  // @gotags: `class:"public"`
 
   // The type of the resource.
-  string type = 90;
+  string type = 90;  // @gotags: `class:"public"`
 
   // The ID of the primary auth method for this scope.  A primary auth method
   // is allowed to vivify users when new accounts are created and is the source for the users account info
-  google.protobuf.StringValue primary_auth_method_id = 100
-      [json_name = "primary_auth_method_id", (custom_options.v1.generate_sdk_option) = true, (custom_options.v1.mask_mapping) = { this: "primary_auth_method_id" that: "PrimaryAuthMethodId" }];
+  google.protobuf.StringValue primary_auth_method_id = 100 [
+    json_name = "primary_auth_method_id",
+    (custom_options.v1.generate_sdk_option) = true,
+    (custom_options.v1.mask_mapping) = { this: "primary_auth_method_id" that: "PrimaryAuthMethodId" }
+  ];  // @gotags: `class:"public"`
 
   // Output only. The available actions on this resource for this user.
-  repeated string authorized_actions = 300 [json_name = "authorized_actions"];
+  repeated string authorized_actions = 300 [json_name = "authorized_actions"];  // @gotags: `class:"public"`
 
   // Output only. The authorized actions for the scope's collections.
   map<string, google.protobuf.ListValue> authorized_collection_actions = 310 [json_name = "authorized_collection_actions"];

internal/proto/local/controller/api/services/v1/auth_method_service.proto

@@ -200,14 +200,14 @@ message OidcTokenAttributes {
 
 message AuthenticateRequest {
   // The ID of the Auth Method in the system that should be used for authentication.
-  string auth_method_id = 1 [json_name = "auth_method_id"];
+  string auth_method_id = 1 [json_name = "auth_method_id"];  // @gotags: `class:"public"`
   // This can be "cookie" or "token". If not provided, "token" will be used. "cookie" activates a split-cookie method where the token is split partially between http-only and regular cookies in order
   // to keep it safe from rogue JS in the browser.
   string token_type = 2 [json_name = "token_type"];
   // Attributes are passed to the Auth Method; the valid keys and values depend on the type of Auth Method as well as the command.
   google.protobuf.Struct attributes = 4 [json_name = "attributes"];
   // The command to perform.
-  string command = 5 [json_name = "command"];
+  string command = 5 [json_name = "command"];  // @gotags: `class:"public"`
 
   // Deprecated fields
   reserved "credentials";
@@ -220,5 +220,5 @@ message AuthenticateResponse {
   // Valid keys and values depend on the type of Auth Method as well as the command.
   google.protobuf.Struct attributes = 4 [json_name = "attributes"];
   // The command that was performed.
-  string command = 5 [json_name = "command"];
+  string command = 5 [json_name = "command"];  // @gotags: `class:"public"`
 }