Log failed authentication attempts with remote address for fail2ban (#…

…2334) Signed-off-by: David Schneiderbauer <[email protected]>
go-gitea · Aug 24, 2017 · 174255e · 174255e
1 parent 233bbcf
commit 174255e
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/routers/user/auth.go b/routers/user/auth.go
@@ -154,8 +154,10 @@ func SignInPost(ctx *context.Context, form auth.SignInForm) {
 	if err != nil {
 		if models.IsErrUserNotExist(err) {
 			ctx.RenderWithErr(ctx.Tr("form.username_password_incorrect"), tplSignIn, &form)
+			log.Info("Failed authentication attempt for %s from %s", form.UserName, ctx.RemoteAddr())
 		} else if models.IsErrEmailAlreadyUsed(err) {
 			ctx.RenderWithErr(ctx.Tr("form.email_been_used"), tplSignIn, &form)
+			log.Info("Failed authentication attempt for %s from %s", form.UserName, ctx.RemoteAddr())
 		} else {
 			ctx.Handle(500, "UserSignIn", err)
 		}