{"action":"closed","issue":{"url":"https://api.github.com/repos/owncloud/security/issues/1","repository_url":"https://api.github.com/repos/owncloud/security","labels_url":"https://api.github.com/repos/owncloud/security/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/owncloud/security/issues/1/comments","events_url":"https://api.github.com/repos/owncloud/security/issues/1/events","html_url":"https://github.com/owncloud/security/issues/1","id":237645938,"number":1,"title":"No way to detect failed logins in app","user":{"login":"karakayasemi","id":14157973,"avatar_url":"https://avatars1.githubusercontent.com/u/14157973?v=3","gravatar_id":"","url":"https://api.github.com/users/karakayasemi","html_url":"https://github.com/karakayasemi","followers_url":"https://api.github.com/users/karakayasemi/followers","following_url":"https://api.github.com/users/karakayasemi/following{/other_user}","gists_url":"https://api.github.com/users/karakayasemi/gists{/gist_id}","starred_url":"https://api.github.com/users/karakayasemi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/karakayasemi/subscriptions","organizations_url":"https://api.github.com/users/karakayasemi/orgs","repos_url":"https://api.github.com/users/karakayasemi/repos","events_url":"https://api.github.com/users/karakayasemi/events{/privacy}","received_events_url":"https://api.github.com/users/karakayasemi/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2017-06-21T19:52:56Z","updated_at":"2017-07-07T07:53:25Z","closed_at":"2017-07-07T07:53:25Z","body":"I am struggling with detect failed login in app. Firstly, I thought I can add Middleware to loginController. Afterward, I understood that only I can add middleware to app controllers. No way to access failed login attempts with app middleware without modifying the source code. \r\nI tried to check the password in the application with a preLogin hook. However, there is an error in the logic of emitting preLogin signal in the LoginController. UserSession's login function is checking password and emitting preLogin signal, but loginController is either checking password before UserSession and returning response without hook signal when failed login attempts.\r\nOnly way I can find to detect failed login is the log file. Maybe I can read log file with a cronjob, but it is not a proper way."}}
{"actor":{"display_login":"DeepDiver1975"}}