Skip to content

coderd/userauth: log when an attempted password reset attempt fails #15154

@johnstcn

Description

@johnstcn

Relates to #14232

Motivation

A security team may wish to monitor attempts to reset user passwords.

Proposed Solution

We should drop some logs at ERROR or WARN when the following events occur:

  • A password reset request is submitted for a user account that does not exist
  • An invalid password reset request is submitted for a user account due to the one time code not matching

Metadata

Metadata

Labels

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions

    pFad - Phonifier reborn

    Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

    Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


    Alternative Proxies:

    Alternative Proxy

    pFad Proxy

    pFad v3 Proxy

    pFad v4 Proxy