Auth logging

[metaben]

Hi! This is such a great project. I've really enjoyed deploying it as a trial at work, and it was relatively plainless to deploy the containerised app with certificates signed by our CA, integrate it with AD using LDAPS, and configure journald as the logging driver.

The problem I am now facing is that I think there is a lack of logging for security events, such as, login failures. I've read a lot of past issues/discussions about logging, and looked at (for example) wiki/blob/main/server/graph/resolvers/authentication.js and is it correct to say there could be more logging?

It is currently difficult as a sysadmin/security person to know from logs what Users have done :(

Could somebody add logging to auth events, would that be straightforward? Is it possible to add something simple in wiki/blob/main/server/helpers/graph.js so that everything the user is being told, is also being logged? Or do I have to wait for v3? Or do you want me to contribute, where are instructions for that? Thx.