diogo/symfony
Archived
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

bug #34957 [Security] Revert "AbstractAuthenticationListener.php error instead info" (larzuk91)

Browse Source 
This PR was submitted for the master branch but it was merged into the 4.4 branch instead.

Discussion
----------

[Security] Revert "AbstractAuthenticationListener.php error instead info"

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | Fix #34836
| License       | MIT

This reverts commit 867eb78cfe.

After that change, every failed login attempt is logged as an error. It's flooding our errors log channel

Commits
-------

9d306f9046 [SECURITY] Revert "AbstractAuthenticationListener.php error instead info. Rebase of #28462"
This commit is contained in:
Nicolas Grekas 2019-12-13 13:11:54 +01:00
commit a24b16534e
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/Symfony/Component/Security/Http/Firewall/AbstractAuthenticationListener.php
View File

@ -184,7 +184,7 @@ abstract class AbstractAuthenticationListener extends AbstractListener implement
private function onFailure(Request $request, AuthenticationException $failed): Response
{
if (null !== $this->logger) {
$this->logger->error('Authentication request failed.', ['exception' => $failed]);
$this->logger->info('Authentication request failed.', ['exception' => $failed]);
}
$token = $this->tokenStorage->getToken();