From 174255e74ee2c07e685913ab8bce08fc046569f0 Mon Sep 17 00:00:00 2001
From: David Schneiderbauer <daviian@users.noreply.github.com>
Date: Thu, 24 Aug 2017 07:57:54 +0200
Subject: [PATCH] Log failed authentication attempts with remote address for
fail2ban (#2334)
Signed-off-by: David Schneiderbauer <dschneiderbauer@gmail.com>
---
routers/user/auth.go | 2 ++
1 file changed, 2 insertions(+)
diff --git a/routers/user/auth.go b/routers/user/auth.go
index b2caba0bb1..eb41e2f994 100644
--- a/routers/user/auth.go
+++ b/routers/user/auth.go
@@ -154,8 +154,10 @@ func SignInPost(ctx *context.Context, form auth.SignInForm) {
if err != nil {
if models.IsErrUserNotExist(err) {
ctx.RenderWithErr(ctx.Tr("form.username_password_incorrect"), tplSignIn, &form)
+ log.Info("Failed authentication attempt for %s from %s", form.UserName, ctx.RemoteAddr())
} else if models.IsErrEmailAlreadyUsed(err) {
ctx.RenderWithErr(ctx.Tr("form.email_been_used"), tplSignIn, &form)
+ log.Info("Failed authentication attempt for %s from %s", form.UserName, ctx.RemoteAddr())
} else {
ctx.Handle(500, "UserSignIn", err)
}