Add UserName & ClientId to the security log.

Resolve #5120
abpframework · Aug 20, 2020 · b35cead · b35cead
1 parent 8822c10
commit b35cead
Showing 1 changed file with 8 additions and 3 deletions.
diff --git a/...Server.Domain/Volo/Abp/IdentityServer/AspNetIdentity/AbpResourceOwnerPasswordValidator.cs b/...Server.Domain/Volo/Abp/IdentityServer/AspNetIdentity/AbpResourceOwnerPasswordValidator.cs
@@ -63,6 +63,7 @@ public AbpResourceOwnerPasswordValidator(
         [UnitOfWork]
         public virtual async Task ValidateAsync(ResourceOwnerPasswordValidationContext context)
         {
+            var clientId = context.Request?.Client?.ClientId;
             using var scope = ServiceScopeFactory.CreateScope();
 
             await ReplaceEmailToUsernameOfInputIfNeeds(context);
@@ -91,7 +92,8 @@ await IdentitySecurityLogManager.SaveAsync(
                     {
                         Identity = IdentityServerSecurityLogIdentityConsts.IdentityServer,
                         Action = IdentityServerSecurityLogActionConsts.LoginSucceeded,
-                        UserName = context.UserName
+                        UserName = context.UserName,
+                        ClientId = clientId
                     }
                 );
             }
@@ -154,7 +156,8 @@ await IdentitySecurityLogManager.SaveAsync(new IdentitySecurityLogContext
                 {
                     Identity = IdentityServerSecurityLogIdentityConsts.IdentityServer,
                     Action = result.ToIdentitySecurityLogAction(),
-                    UserName = context.UserName
+                    UserName = context.UserName,
+                    ClientId = clientId
                 });
             }
             else
@@ -166,7 +169,9 @@ await IdentitySecurityLogManager.SaveAsync(new IdentitySecurityLogContext
                 await IdentitySecurityLogManager.SaveAsync(new IdentitySecurityLogContext()
                 {
                     Identity = IdentityServerSecurityLogIdentityConsts.IdentityServer,
-                    Action = IdentityServerSecurityLogActionConsts.LoginInvalidUserName
+                    Action = IdentityServerSecurityLogActionConsts.LoginInvalidUserName,
+                    UserName = context.UserName,
+                    ClientId = clientId
                 });
             }