Skip to main content

LMS Audit and Timeline API

Summary​

Source-backed Draft reference for LMS Audit and Timeline API across the implemented Training Service and, where applicable, Gateway surface.

Audience​

API consumers, engineering, QA, support, architecture, security, product, and implementation reviewers.

Reference Content​

Operations​

Native audit and timeline collection routes return tenant-filtered records ordered newest first. An optional take value is clamped to a bounded range with a default. No resource-type, resource-identifier, actor, action, or date filter is implemented.

Writes across course, path, enrollment, assessment, certificate, material, and session operations populate audit and/or timeline evidence. Actor context and correlation handling exist in the wider request flow, but these read routes do not declare authorization. Retention, redaction, immutable export, and per-resource access rules were not found.

The endpoints return persistence entities directly rather than dedicated public DTOs. Actual audit content, actor data, identifiers, and internal metadata are intentionally excluded here. Their exposure boundary requires confirmation.

Source References​

  • microservices/src/training-service/Api/TrainingEndpoints.cs
  • microservices/src/training-service/Infrastructure/TrainingDbContext.cs

See Also​

Keywords​

  • LMS API
  • Training Service
  • Source-backed contract

Revision Information​

  • Status: Draft
  • Last reviewed: 2026-07-17
  • Review cycle: Quarterly