Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Log format corrections #224

Closed
1 task done
nickcj931 opened this issue Sep 15, 2022 · 3 comments · Fixed by #403
Closed
1 task done

Log format corrections #224

nickcj931 opened this issue Sep 15, 2022 · 3 comments · Fixed by #403
Labels
bug Something isn't working good first issue Good for newcomers released

Comments

@nickcj931
Copy link

nickcj931 commented Sep 15, 2022

Description

In an attempt to parse my logs with failed authentication events, I have noticed inconsistency with how logs spit out various messages based on the type of authentication failure. Which is inconsistent. You also get different tags come through for selected filter option, for example selecting Warning also gets you Error messages

Inconsistency label examples

  1. If you attempt to login with your Jellyseerr created user credentials you get Severity="WARN"; Label="API"; Message="Failed sign-in attempt using invalid Overseerr password"
  2. If you attempt to login with Emby credentials you get Severity="INFO"; Label="AUTH";Message="Failed login attempt from user with incorrect Jellyfin credentials"

It would be good if you could look for Authentication issues under the same tag to pickup any possible malicious activity much easier.

Version

1.1.1

Steps to Reproduce

  1. Go to Settings
  2. Logs
  3. Select between different filters
  4. Observe filtered out tags making it into the view and also different tags when login fail attempts are made

Screenshots

Screenshot 2022-09-15 at 13 29 17

Logs

2022-09-15T12:28:43.801Z [warn][API]: Failed sign-in attempt using invalid Overseerr password{"email":"<EMAIL REMOVED>","ip":"::ffff:<IP ADDRESS REMOVED>"}

2022-09-15T12:28:31.647Z [info][Auth]: Failed login attempt from user with incorrect Jellyfin credentials{"account":{"email":"<EMAIL REMOVED>","ip":"::ffff:<IP ADDRESS REMOVED>","password":"__REDACTED__"}}

Platform

desktop

Device

Server

Operating System

Unraid

Browser

Chrome, Safari, Firefox

Additional Context

No response

Code of Conduct

  • I agree to follow Overseerr's Code of Conduct
@Fallenbagel
Copy link
Owner

Is it the same on develop tag too?

@nickcj931
Copy link
Author

nickcj931 commented Sep 26, 2022

Yep just done a pull on the develop tag and its exactly the same result
Screenshot 2022-09-26 at 09 12 58

@Fallenbagel
Copy link
Owner

🎉 This issue has been resolved in version 1.6.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working good first issue Good for newcomers released
Projects
None yet
2 participants