@@ -738,0 +803,4 @@
+        signature: &str,
+    ) -> Result<AuditLog, JotApiError> {
+        let uri = self.base_url.pathjoin("mod/activity");
+        let since_unix: u32 = match since.duration_since(UNIX_EPOCH) {

@@ -738,0 +822,4 @@
+        query.push(("mod_short_id", mod_short_id));
+        query.push(("since", since_unix.to_string()));
+
+        if let Some(kid) = short_id_filter {

@@ -738,0 +834,4 @@
+            .header(AUTHORIZATION, format!("basic {}", signature))
+            .send()
+        {
+            Ok(resp) => {

@@ -43,3 +43,3 @@
     pub log_level: Level,
 
-    /// The key's content to serve at the server root
+    /// The key's to grant admin rights, and to serve its content at the server

@@ -81,0 +96,4 @@
+                .collect::<Vec<String>>();
+            for act in actions {
+                acts.push_bind(act);
+            }*/

@@ -0,0 +18,4 @@
+        context.req.query::<String>("mod_short_id").ok_or_else(|| {
+            warn!("Unauthorized: mod_short_id");
+            ResponseError::Unauthorized
+        })?;

@@ -735,0 +508,4 @@
+                warn!(
+                    status_code = resp.status().to_string(),
+                    "Unhandled status"
+                );

@@ -735,0 +523,4 @@
+        limit: u32,
+        since: &Timestamp,
+        short_id_filter: &Option<String>,
+        mod_short_id: String,

@@ -735,0 +533,4 @@
+        let mut query = Vec::new();
+        query.push(("limit", limit.to_string()));
+        query.push(("mod_short_id", mod_short_id));
+        query.push(("since", since_unix.to_string()));

@@ -44,1 +47,3 @@
-            let slip = match client.admin_auth_audit_log() {
+            let slip = match client.slip_auth(
+                &key.keyid(),
+                Authorization::LIST,

@@ -0,0 +46,4 @@
+                    error!(error = err, "Failed to open keyfile");
+                    out::exit("Unable to open keyfile", 1);
+                }
+            };

@@ -0,0 +117,4 @@
+        }
+
+        // make sure the key isn't expired
+        if key_meta.config.expire > 0

@@ -0,0 +19,4 @@
+    let short_id_filter = context.req.query::<String>("short_id");
+    let key_meta = slip_auth::authorize(context, Authorization::MOD).await?;
+
+    if !context.is_mod(&key_meta.key_id) {

@@ -0,0 +28,4 @@
+        Some(sss) => UNIX_EPOCH + Duration::from_secs(sss.into()),
+        None => SystemTime::now() - Duration::from_hours(24),
+    };
+    let action_filters = vec![

@@ -0,0 +51,4 @@
+        .audit_log_insert(
+            key_meta.key_id.to_short_hexstring(),
+            request_address(&context),
+            AuditAction::AuditLogList,

@@ -0,0 +1,33 @@
+use std::collections::HashMap;

@@ -102,0 +135,4 @@
+                ResponseError::Forbidden
+            }
+            AuthError::Unexpected(msg) => {
+                error!(msg = msg, "Unexpected slip auth failure");

@@ -138,9 +142,45 @@ pub enum Authorization {
 pub struct Slip {
     pub nonce: String,
     pub op: Authorization,
+    pub params: HashMap<String, String>,

@@ -144,0 +166,4 @@
+    }
+}
+
+impl Hash for AuthorizationRequest {

@@ -168,6 +214,7 @@ pub struct AllowDenyList {
     pub root_key: Option<String>,
     pub allow: HashSet<String>,
     pub deny: HashSet<String>,
+    pub moderator: HashSet<String>,