Overview
The backend has a proper Winston setup (nest-winston, buildWinstonOptions, configurable LOG_LEVEL) — good groundwork. What is missing is correlation: nothing ties the log lines belonging to a single request together, so tracing a document through upload → risk assessment → queue → Stellar anchoring means guessing.
Note on history: issue [BE-32] "Add correlation IDs to all requests for end-to-end log tracing" is closed — and appears twice in the issue history, both closed. However the implementation is not present in the codebase:
backend/src/common/logger.config.ts sets timestamp, error, and JSON formats only — no correlation field.- No middleware or interceptor generates or attaches a request ID.
- Searching for
correlation, requestId, or x-request-id across backend/src returns only an unrelated domain field in external-validation.service.ts (a validation request's own primary key, not an HTTP correlation ID).
So this is not a duplicate of BE-32 — it is the same work, re-opened because it was marked done without landing. Please verify against the current code before closing this one.
Tasks
Acceptance Criteria
Notes for Contributors
Comment below to be assigned.
Overview
The backend has a proper Winston setup (
nest-winston,buildWinstonOptions, configurableLOG_LEVEL) — good groundwork. What is missing is correlation: nothing ties the log lines belonging to a single request together, so tracing a document through upload → risk assessment → queue → Stellar anchoring means guessing.Note on history: issue [BE-32] "Add correlation IDs to all requests for end-to-end log tracing" is closed — and appears twice in the issue history, both closed. However the implementation is not present in the codebase:
backend/src/common/logger.config.tssets timestamp, error, and JSON formats only — no correlation field.correlation,requestId, orx-request-idacrossbackend/srcreturns only an unrelated domain field inexternal-validation.service.ts(a validation request's own primary key, not an HTTP correlation ID).So this is not a duplicate of BE-32 — it is the same work, re-opened because it was marked done without landing. Please verify against the current code before closing this one.
Tasks
X-Request-Id, and echo it on the response.authorization,cookie,password, and token fields.Acceptance Criteria
Notes for Contributors
Comment below to be assigned.