Add logging

Signed-off-by: Victor Chang <vicchang@nvidia.com>

Author: mocsharp

src/Authentication/Logging.cs

@@ -20,7 +20,13 @@ namespace Monai.Deploy.WorkflowManager.Logging
 {
     public static partial class Log
     {
-        [LoggerMessage(EventId = 500000, Level = LogLevel.Information, Message = "BYpass authentication.")]
+        [LoggerMessage(EventId = 500000, Level = LogLevel.Information, Message = "Bypass authentication.")]
         public static partial void BypassAuthentication(this ILogger logger);
+
+        [LoggerMessage(EventId = 500001, Level = LogLevel.Debug, Message = "User '{user}' attempting to access controller '{controller}'.")]
+        public static partial void UserAccessingController(this ILogger logger, string? user, string controller);
+
+        [LoggerMessage(EventId = 500002, Level = LogLevel.Debug, Message = "User '{user}' access denied due to allowed permissions: '{permissions}'.")]
+        public static partial void UserAccessDenied(this ILogger logger, string? user, string? permissions);
     }
 }

src/Authentication/Middleware/EndpointAuthorizationMiddleware.cs

@@ -21,6 +21,7 @@
 using Microsoft.Extensions.Options;
 using Monai.Deploy.Security.Authentication.Configurations;
 using Monai.Deploy.Security.Authentication.Extensions;
+using Monai.Deploy.WorkflowManager.Logging;
 
 namespace Monai.Deploy.Security.Authentication.Middleware
 {
@@ -54,11 +55,13 @@ public async Task InvokeAsync(HttpContext httpcontext)
             {
                 if (httpcontext.GetRouteValue("controller") is string controller)
                 {
+                    _logger.UserAccessingController(httpcontext.User.Identity.Name, controller);
                     var validEndpoints = httpcontext.GetValidEndpoints(_options.Value.OpenId!.Claims!.RequiredAdminClaims!, _options.Value.OpenId!.Claims!.RequiredUserClaims!);
                     var result = validEndpoints.Any(e => e.Equals(controller, StringComparison.InvariantCultureIgnoreCase)) || validEndpoints.Contains("all");
 
                     if (result is false)
                     {
+                        _logger.UserAccessDenied(httpcontext.User.Identity.Name, string.Join(',', validEndpoints));
                         httpcontext.Response.StatusCode = (int)HttpStatusCode.Forbidden;
 
                         await httpcontext.Response.CompleteAsync().ConfigureAwait(false);