task: apply middleware to api/admin

src/lib/app.ts

@@ -29,6 +29,7 @@ import { unless } from './middleware/unless-middleware';
 import { catchAllErrorHandler } from './middleware/catch-all-error-handler';
 import NotFoundError from './error/notfound-error';
 import { bearerTokenMiddleware } from './middleware/bearer-token-middleware';
+import { auditAccessMiddleware } from './middleware';
 
 export default async function getApp(
     config: IUnleashConfig,
@@ -176,6 +177,7 @@ export default async function getApp(
         rbacMiddleware(config, stores, services.accessService),
     );
 
+    app.use(`${baseUriPath}/api/admin`, auditAccessMiddleware(config));
     app.use(
         `${baseUriPath}/api/admin`,
         maintenanceMiddleware(config, services.maintenanceService),

src/lib/middleware/audit-middleware.test.ts

@@ -26,4 +26,17 @@ describe('auditMiddleware testing', () => {
         expect(audit!.username).toBe('unknown');
         expect(audit!.ip).toBe('::ffff:127.0.0.1');
     });
+    test('If no auth in place, does not add the audit object', async () => {
+        const middleware = auditAccessMiddleware(config);
+        const app = express();
+        app.use('', middleware);
+        let audit: IAuditUser | undefined;
+        app.get('/api/admin/test', (req: IAuthRequest, res) => {
+            audit = req.audit;
+            res.status(200).end();
+        });
+        const request = supertest(app);
+        await request.get('/api/admin/test').expect(200);
+        expect(audit).toBeUndefined();
+    });
 });