Macma Security Events

There is no security event logged when a request to a MACMA API happens without a token.

Events logged by MACMA Core are

Table 1. Macma Security Events
Log event	Description
TLS_DISABLED	Check environment variable JAVA_TLS_DISABLE.
LOGIN_FAILED	Login failed e.g. invalid username or password.
LOGIN_SUCCESSFUL	The login succeeded.
TOKEN_EXPIRED	Is logged as TOKEN_VALIDATION_FAILED.
TOKEN_SIGNATURE_INVALID	Is logged as TOKEN_VALIDATION_FAILED.
TOKEN_VALIDATION_FAILED	The token validation failed. For the reason look into the message details.
UNAUTHORIZED_ACCESS	Attempt to access a resource without required privilege e.g. without being logged in.
INPUT_VALIDATION_FAILED	All input is validated regarding size and accepted characters.
SENSITIVE_DATA_ACCESSED	User password changed or client secret changed.
ENDPOINT_DOES_NOT_EXIST	An url was accessed that does not exist.
X_INPUT_CONVERSION_FAILED	Conversion from payload into object failed.
X_BAD_REQEUST	Tried to access with invalid or incomplete request.
X_UNEXPECTED_EXCEPTION	Any exception can be a hint that an attack is ongoing.
X_NOT_FOUND_EXCEPTION	Tried to access an entity that does not exist.
X_METHOD_NOT_ALLOWED	HTTP method is not supported.
X_UNSUPPORTED_MEDIA_TYPE	The request did provide none or a not supported media type.
X_ACCESS_DENIED	The access was denied.
X_ACCESS_GRANTED	The access was granted after verifying the privileges.
X_CLIENT_ERROR_EXCEPTION	Got an exception from underlying service, most likely keycloak. HTTP 4xx status codes.
X_WEB_APPLICATION_EXCEPTION	Generic runtime exception thrown when calling underlying service.
X_MAX_ALLOWED_SIZE_EXCEEDED	The payload of the request is too large.