Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide logging for password reset request #3745

Open
Darcara opened this issue Mar 30, 2018 · 1 comment
Open

Provide logging for password reset request #3745

Darcara opened this issue Mar 30, 2018 · 1 comment
Labels
issue/confirmed Issue has been reviewed and confirmed to be present or accepted to be implemented type/enhancement An improvement of existing functionality

Comments

@Darcara
Copy link

Darcara commented Mar 30, 2018

  • Gitea version (or commit ref): 1.4.0+rc3

Description

A log for each password reset request, like with failed authentications into gitea.log, would be much appreciated.

While not necessarily a security concern, an IP requesting multiple password resets is indicative of bad behavior. This means it's not necessary to differentiate between proper and 'failed' requests.
I'd like to block that with fail2ban which needs a log line present.

@lunny lunny added the type/enhancement An improvement of existing functionality label Mar 31, 2018
@lunny lunny added this to the 1.x.x milestone Mar 31, 2018
@stale
Copy link

stale bot commented Jan 31, 2019

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

@stale stale bot added the issue/stale label Jan 31, 2019
@lunny lunny added issue/confirmed Issue has been reviewed and confirmed to be present or accepted to be implemented and removed issue/stale labels Feb 7, 2019
@lunny lunny removed this from the 1.x.x milestone Mar 20, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
issue/confirmed Issue has been reviewed and confirmed to be present or accepted to be implemented type/enhancement An improvement of existing functionality
Projects
None yet
Development

No branches or pull requests

2 participants