Log failed authentication attempts with remote address for fail2ban (#2334)

Signed-off-by: David Schneiderbauer <dschneiderbauer@gmail.com>
7 years ago · 174255e74e
parent 233bbcfa94
commit 174255e74e
1 changed files with 2 additions and 0 deletions
--- a/routers/user/auth.go
+++ b/routers/user/auth.go
@ -154,8 +154,10 @@ func SignInPost(ctx *context.Context, form auth.SignInForm) {
 	if err != nil {
 		if models.IsErrUserNotExist(err) {
 			ctx.RenderWithErr(ctx.Tr("form.username_password_incorrect"), tplSignIn, &form)
+			log.Info("Failed authentication attempt for %s from %s", form.UserName, ctx.RemoteAddr())
 		} else if models.IsErrEmailAlreadyUsed(err) {
 			ctx.RenderWithErr(ctx.Tr("form.email_been_used"), tplSignIn, &form)
+			log.Info("Failed authentication attempt for %s from %s", form.UserName, ctx.RemoteAddr())
 		} else {
 			ctx.Handle(500, "UserSignIn", err)
 		}