-
-
Notifications
You must be signed in to change notification settings - Fork 6.3k
Closed
Labels
good first issueLikely to be an easy fixLikely to be an easy fixtype/proposalThe new feature has not been accepted yet but needs to be discussed first.The new feature has not been accepted yet but needs to be discussed first.
Description
Feature Description
Hi,
it would be great if failed authentications would be logged to ERROR level instead of INFO.
routers/web/auth/auth.go:231:SignInPost() [I] Failed authentication attempt for username from 1.1.1.1:44774: user does not exist [uid: 0, name: username]
It is in fact an error and the INFO level output can still be a bit much in production, therefore it would be preferable to be able to lower the level to "warn" and still catch the failed logins for fail2ban etc.
If I see it correctly the change need to be done in routers/web/auth/auth.go in lines 227-252.
What do you think?
Best regards
Daniel
Screenshots
No response
urz-hgw
Metadata
Metadata
Assignees
Labels
good first issueLikely to be an easy fixLikely to be an easy fixtype/proposalThe new feature has not been accepted yet but needs to be discussed first.The new feature has not been accepted yet but needs to be discussed first.