How ankit-goyal-git/secure-infrastructure-access-management-and-session-monitoring-system works
This is a zero-trust, just-in-time privileged-access platform: employees request temporary server access, managers approve or deny it, and authorized engineers connect through an SSH bastion. The backend records grants and sessions, while managers can revoke live access; audit and monitoring capabilities provide review and alerting. The graph preserves the documented admin, employee, manager, audit, and session-replay surfaces. Some subsystem links are based on README descriptions or SOURCE INDEX references rather than inspected implementation excerpts.
Main entry points: src/app.js REST API · ssh_server.py SSH bastion · App.jsx Role dashboards · src/app.js Event ingestion and queries
Components 28
Web portals
- Role dashboards
frontend/src/App.jsx - JIT request and grants
frontend/src/pages/EmployeeDashboard.jsx - Approvals and sessions
frontend/src/pages/ManagerDashboard.jsx - Server and user admin
frontend/src/pages/AdminDashboard.jsx - Audit review and replay
frontend/src/pages/AuditView.jsx
Access management API
- REST API
backend/src/app.js - Identity and role checks
backend/src/middleware/auth.js - Request lifecycle
backend/src/controllers/requestController.js - Grant and revocation
backend/src/controllers/managerController.js - Server administration
backend/src/controllers/serverController.js - Gateway access check
backend/src/controllers/gatewayController.js - Access and audit records
backend/src/models/index.js
SSH gateway
- SSH bastion
gateway/app/ssh_server.py - Access policy
gateway/app/policy.py - Live session manager
gateway/app/session_manager.py - Session recording
gateway/app/recorder.py - Revocation listener
gateway/app/revocation.py
Audit and monitoring
- Event ingestion and queries
monitoring/src/app.js - Prometheus metrics
monitoring/src/metrics.js - Alert rules
monitoring/src/alerts.js - Monitoring event store
monitoring/src/db.js
Other components
- Engineer
- Security manager
- Administrator
- SSH terminal
- Managed server
- PostgreSQL
- Redis cache and pubsub
Connections 34
- Engineer → Role dashboards: uses portal
README.md - Security manager → Role dashboards: uses portal
README.md - Administrator → Role dashboards: uses portal
README.md - Role dashboards → JIT request and grants: routes to
frontend/src/App.jsx - Role dashboards → Approvals and sessions: routes to
frontend/src/App.jsx - Role dashboards → Server and user admin: routes to
frontend/src/App.jsx - Role dashboards → Audit review and replay: routes to
frontend/src/App.jsx - JIT request and grants → REST API: requests access
- Approvals and sessions → REST API: reviews access
- Server and user admin → REST API: manages servers
- Audit review and replay → REST API: queries audit
- REST API → Identity and role checks: mounts routes
backend/src/app.js - REST API → Request lifecycle: routes requests
backend/src/app.js - REST API → Grant and revocation: routes manager actions
- REST API → Server administration: routes server actions
- REST API → Gateway access check: routes internal checks
- Grant and revocation → Access and audit records: reads and writes
backend/src/controllers/managerController.js - Grant and revocation → Redis cache and pubsub: caches grants and publishes revocations
backend/src/controllers/managerController.js - Access and audit records → PostgreSQL: persists records
- SSH terminal → SSH bastion: connects over SSH
README.md - SSH bastion → Gateway access check: checks authorization
- SSH bastion → Access policy: enforces policy
gateway/app/ssh_server.py - SSH bastion → Live session manager: tracks sessions
gateway/app/ssh_server.py - SSH bastion → Session recording: records session
gateway/app/ssh_server.py - SSH bastion → Managed server: opens SSH tunnel
README.md - Redis cache and pubsub → Revocation listener: delivers revocations
README.md - Revocation listener → Live session manager: severs session
- SSH bastion → Event ingestion and queries: submits events
monitoring/src/app.js - REST API → Event ingestion and queries: submits events
monitoring/src/app.js - Event ingestion and queries → Monitoring event store: persists and queries
monitoring/src/app.js - Event ingestion and queries → Prometheus metrics: updates metrics
monitoring/src/app.js - Event ingestion and queries → Alert rules: evaluates rules
monitoring/src/app.js - Alert rules → Event ingestion and queries: re-ingests alerts
monitoring/src/app.js - Event ingestion and queries → Audit review and replay: serves audit data