feature (log): log auth failure - #852

We want to have a warning so that it is possible from the logs to immediately
see if there have been failed logging attempts.

This might allow in the future to set up tools like fail2ban.

Co-authored-by: Marco Seravalli <me@marcoseravalli.com>
This commit is contained in:
mseravalli 2025-06-18 02:03:06 +02:00 committed by GitHub
parent ca68df76ab
commit 609fc607c2
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -307,6 +307,7 @@ func SessionAuthMiddleware(ctx *App, res http.ResponseWriter, req *http.Request)
// - identity provider redirection uri. eg: oauth2, openid, ...
templateBind, err := plugin.Callback(formData, idpParams, res)
if err == ErrAuthenticationFailed {
Log.Warning("failed authentication - %s", err.Error())
http.Redirect(
res, req,
req.URL.Path+"?action=redirect",