Log SAML IdP changes

[supersven]

Log all changes to SAML IdPs that are triggered via the IdP REST API in Spar.

This was extracted from #4926 to make it easier to digest (i.e. smaller) and to not be blocked on waiting for the email template.

Ticket: https://wearezeta.atlassian.net/browse/WPB-22124

Checklist

• Add a new entry in an appropriate subdirectory of changelog.d
• Read and follow the PR guidelines

[Copilot]

Pull request overview

This PR adds structured logging for all SAML IdP configuration changes (create, update, delete) made through the Spar REST API. The changes include adding a new helper module for certificate string representation, enhancing existing API functions to accept and log user information, and comprehensive unit tests.

Changes:

• Added logging for IdP create, update, and delete operations with detailed information including team, user, issuer, domain, and certificate details
• Introduced Data.X509.Extended module with certToString function to format certificate information for logs
• Added Maybe UserId parameter to IdP API handlers to capture the user making changes

Reviewed changes

Copilot reviewed 15 out of 15 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
services/spar/src/Spar/API.hs	Added logging calls to idpCreate, idpDelete, and idpUpdate; changed logger type from String to (Msg -> Msg); added helper functions for logging
libs/wire-api/src/Wire/API/Routes/Public/Spar.hs	Added ZOptUser parameter to IdP creation routes to capture user information
libs/wire-api/src/Wire/API/User/IdentityProvider.hs	Converted IdPMetadataInfo from simple constructor to record with lenses for easier field access
libs/extended/src/Data/X509.Extended.hs	New module providing certificate-to-string formatting for logging
libs/extended/test/Test/Data/X509/ExtendedSpec.hs	Unit tests for certificate string formatting
services/spar/test/Test/Spar/Saml/IdPSpec.hs	Comprehensive unit tests verifying log output for IdP operations
services/spar/src/Spar/Sem/SAMLUserStore/Mem.hs	Implemented previously stubbed mock functions for paginated queries
services/spar/test/resources/okta-keyinfo-1.xml	Test data file for certificate parsing tests
libs/extended/test/data/*.pem	Test certificate files for extended library tests
services/spar/spar.cabal, services/spar/default.nix	Added filepath dependency and test module
libs/extended/extended.cabal, libs/extended/default.nix	Added dependencies for X509 and cryptography support
changelog.d/2-features/log-saml-idp-changes	Changelog entry describing the feature

Comments suppressed due to low confidence (1)

services/spar/src/Spar/API.hs:870

• Corrected spelling of 'ommitted' to 'omitted'.

  -- if this step is ommitted (due to a crash) resending the update request should fix the inconsistent state.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[battermann]

What is the value of using lenses here? I thought, we planned to migrate away from them.

[supersven]

Thanks for pointing this out.

Yeah, I was probably under the influence of all the Lenses-code in Spar... 😅 I've removed this makeLenses call now.