Security Features

Cliqer provides enterprise-grade security features for compliance and access management.

Available Features

Audit Logging

• Status: Available
• Endpoint: /api/admin/audit/logs
• Admin Console: /dash/audit
• Features:
  • Automatic API request logging
  • Filter by date, user, action, resource
  • Pagination and export
  • Real-time monitoring

Example:

curl -H "Authorization: Bearer YOUR_API_KEY" \
  $BASE_URL/api/admin/audit/logs

Security Monitoring

• Status: Available
• Endpoint: /api/admin/security/tls-info
• Admin Console: /dash/security
• Features:
  • TLS/SSL certificate monitoring
  • Encryption status
  • Security recommendations
  • Compliance checks

Example:

curl -H "Authorization: Bearer YOUR_API_KEY" \
  $BASE_URL/api/admin/security/tls-info

Role-Based Access Control (RBAC)

• Status: Available
• Endpoints:
  • /api/admin/rbac/roles
  • /api/admin/rbac/permissions
• Admin Console: /dash/rbac
• Features:
  • Custom role definitions
  • Granular permissions
  • Role assignment
  • Permission auditing

Admin Console Navigation

All security features are accessible from the dashboard:

Audit Log Schema

Events captured include:

• API access events
• User actions
• IP addresses and user agents
• Request metadata (method, status, duration)
• Severity levels (low, medium, high, critical)

Environment Configuration

# API Configuration
CLIQER_API_KEY=your_api_key_here

# Database Configuration  
DATABASE_URL=postgresql://user:pass@your-db-host:5432/dbname

Roadmap

Upcoming security features:

• SSO enforcement
• API key management with IP allowlisting
• Advanced rate limiting
• Multi-tenant isolation

Related Documentation

• RBAC Configuration
• Data Encryption
• SSO FAQ
• SCIM Provisioning