작업 내용 저장

app/core/auth.py

@@ -26,7 +26,7 @@ class AuthContext:
     permission: Permission
     user_id: str | None = None
     token_id: str | None = None
-    bot_principal_id: str | None = None
+    token_type: str | None = None
     token_source: str = "env"
 
 def get_auth_repository(settings: Settings = Depends(get_settings)) -> Generator[PortfolioRepository, None, None]:
@@ -64,7 +64,7 @@ def _resolve_auth_context(token: str, settings: Settings, repository: PortfolioR
         permission=Permission(principal.permission),
         user_id=principal.user_id,
         token_id=principal.token_id,
-        bot_principal_id=principal.bot_principal_id,
+        token_type=principal.token_type,
         token_source="db",
     )
 

app/core/security.py

@@ -6,8 +6,6 @@ import base64
 import hashlib
 import hmac
 import secrets
-from datetime import datetime, timezone
-from typing import Any
 
 
 def hash_password(password: str) -> str:
@@ -59,29 +57,4 @@ def mask_secret(value: str, *, prefix: int = 6, suffix: int = 4, mask_char: str
     if len(text) <= prefix + suffix:
         return mask_char * len(text)
     hidden = len(text) - prefix - suffix
-    return f"{text[:prefix]}{mask_char * hidden}{text[-suffix:]}"
-
-
-def build_audit_event(
-    *,
-    action: str,
-    actor_id: str,
-    bot_id: str,
-    token_id: str,
-    token_ref: str,
-    result: str,
-    detail: str | None = None,
-) -> dict[str, Any]:
-    payload: dict[str, Any] = {
-        "event_type": "auth.bot_token",
-        "action": action,
-        "actor_id": actor_id,
-        "bot_id": bot_id,
-        "token_id": mask_secret(token_id, prefix=6, suffix=4),
-        "token_ref": token_ref,
-        "result": result,
-        "occurred_at": datetime.now(timezone.utc).isoformat(),
-    }
-    if detail:
-        payload["detail"] = detail
-    return payload
+    return f"{text[:prefix]}{mask_char * hidden}{text[-suffix:]}"