Token Audit Log

Every token operation you perform (create, rotate, revoke, update) is recorded automatically in the TokenAudits table of auth.db, so there is always a trail to consult when you're wondering who changed what. This page documents the schema, along with some queries to get you started.

Audit Schema ​

The Web UI exposes per-token audit history at GET /ui/api/tokens/{id}/audit. See the Web UI API reference.

Direct Queries ​

-- All operations for a token owner
SELECT * FROM TokenAudits WHERE Username = 'api-service' ORDER BY Timestamp DESC;

-- Recent rotations
SELECT Username, Operation, Timestamp FROM TokenAudits
WHERE Operation = 'Rotated' AND Timestamp > datetime('now', '-1 day')
ORDER BY Timestamp DESC;

-- Last 24 hours of activity
SELECT * FROM TokenAudits
WHERE Timestamp > datetime('now', '-1 day')
ORDER BY Timestamp DESC;

First-run Token File ​

On first run, Portway writes the initial token to tokens/{SERVER_NAME}.txt:

{
  "Username": "SERVER-NAME",
  "Token": "base64-encoded-secure-token",
  "AllowedScopes": "*",
  "AllowedEnvironments": "*",
  "ExpiresAt": "Never",
  "CreatedAt": "2024-01-01 00:00:00"
}

Record the token value, delete the file, and use the Web UI to create all subsequent tokens.

Related Topics ​

• Web UI guide: browser-based token management
• Authentication reference: token properties and scope patterns
• Security guide: incident response and token rotation