Add 'System' Username to Audit Logs Generated with API Requests

[zackcl]

Resolves #1983

This PR adds 'System' username to audit logs generated with API requests. This was done by including [email protected] to the payload's email so that the existing systemUserDoc can be used in this case. I had to also include hd to bypass the domain name checking.

payload = {
    hd: env.google.domainName,
    email: '[email protected]',
};

Here's the screenshot of audit logs displaying the logs with 'System' username instead of empty username after this change:

[danoswaltCL]

Better than blank for sure, a google service account "user" does have an email and user-like metadata associated with it though if you want to be more explicit: [email protected]. I'm fine with saying "System" just to not be blank though.

[zackcl]

Better than blank for sure, a google service account "user" does have an email and user-like metadata associated with it though if you want to be more explicit: [email protected]. I'm fine with saying "System" just to not be blank though.

Yeah, that would be better, but I'm not sure how to extract the email from a service account access token.

The tokenInfo (const tokenInfo = await client.getTokenInfo(token);) doesn't include anything like email or name as I checked.

Here's an example:

tokenInfo:  {
    "expiry_date": 1727709292563,
    "scopes": [
        "https://www.googleapis.com/auth/cloud-platform"
    ],
    "azp": "some_digits",
    "aud": "some_digits",
    "exp": "some_digits",
    "access_type": "online"
}