Skip to main content

Workflow Audit and Outbox Endpoints

Summary​

Two diagnostic reads expose recent audit rows and selected outbox metadata. Exact method/route entries are in the endpoint catalog.

Audit read​

Audit results are ordered newest-first, bounded to 1–1000 items and tenant-filtered through EF Core. The endpoint returns persistence audit entities directly.

Outbox read​

Outbox results are ordered newest-first and bounded to 1–1000. Projection exposes selected metadata and omits stored payload/error content.

Security distinction​

Neither operation requires authorization. Audit rows are tenant-filtered; outbox records have no tenant global filter, making the outbox operation a verified diagnostic exposure risk.

Requires Confirmation​

Production availability, administrative permissions, outbox tenant scoping and retention require confirmation.

Source References​

  • microservices/src/workflow-service/Api/WorkflowEndpoints.cs
  • microservices/src/workflow-service/Application/Queries/WorkflowQueries.cs
  • microservices/src/workflow-service/Infrastructure/WorkflowDbContext.cs

See Also​

Keywords​

Workflow API, approval endpoint, Workflow Service.

Revision Information​

  • Status: Draft
  • Last reviewed: 2026-07-20
  • Next review: 2026-10-20