Observability & audit

[geolunalg]

EPIC: Epic: Authentication & Session Management (JWT + Refresh) #2065

Overview

User Story:
As an admin/security team, I want authentication events logged so we can investigate issues.

Action Items

Acceptance Criteria:

• Log login success/failure, refresh success/failure, logout, token reuse detection.
• Logs avoid storing raw tokens or passwords.
• Metrics dashboards show rate of refresh failures and login attempts.

Resources/Instructions

REPLACE THIS TEXT - If there is a website that has documentation that helps with this issue provide the link(s) here.

[geolunalg]

@JackHaeg @trillium @rteas

This is a nice to have or can be skipped. This is basically an audit of user authenticaion and or failures to authenticate.

Size: M to L