From f45b720e0a71fff5645111163df6173a2d6c8328 Mon Sep 17 00:00:00 2001
From: Stefan Majer <stefan.majer@f-i-ts.de>
Date: Thu, 21 May 2026 09:14:34 +0200
Subject: [PATCH] Fix auditing misses user in context

---
 rest/middleware.go | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/rest/middleware.go b/rest/middleware.go
index fcdcbcc1..723e0f70 100644
--- a/rest/middleware.go
+++ b/rest/middleware.go
@@ -11,6 +11,7 @@ import (
 
 	restful "github.com/emicklei/go-restful/v3"
 	"github.com/google/uuid"
+	"github.com/metal-stack/metal-lib/auditing"
 	"github.com/metal-stack/metal-lib/httperrors"
 	"github.com/metal-stack/security"
 )
@@ -134,6 +135,13 @@ func UserAuth(ug security.UserGetter, fallbackLogger *slog.Logger) restful.Filte
 
 		rq := req.Request
 		ctx := security.PutUserInContext(rq.Context(), usr)
+		ctx = auditing.PutUserInContext(ctx, &auditing.User{
+			EMail: usr.EMail,
+			Name: usr.Name,
+			Tenant: usr.Tenant,
+			Project: usr.Project,
+			Subject: usr.Subject,
+		})
 
 		log = log.With("useremail", usr.EMail, "username", usr.Name, "usertenant", usr.Tenant)
 		ctx = context.WithValue(ctx, RequestLoggerKey, log)