Add error log for authentication failure to allow fail2ban integration

1 files changed, 6 insertions, 0 deletions

diff --git a/app/Subscriber/AuthSubscriber.php b/app/Subscriber/AuthSubscriber.php
index 5f22edab..3f6ad05a 100644
--- a/app/Subscriber/AuthSubscriber.php
+++ b/app/Subscriber/AuthSubscriber.php
@@ -97,11 +97,17 @@ class AuthSubscriber extends BaseSubscriber implements EventSubscriberInterface
         $username = $event->getUsername();
 
         if (! empty($username)) {
+            // log login failure in web server log to allow fail2ban usage
+            error_log('Kanboard: user '.$username.' authentication failure');
             $this->userLockingModel->incrementFailedLogin($username);
 
             if ($this->userLockingModel->getFailedLogin($username) > BRUTEFORCE_LOCKDOWN) {
                 $this->userLockingModel->lock($username, BRUTEFORCE_LOCKDOWN_DURATION);
             }
         }
+        else {
+            // log login failure in web server log to allow fail2ban usage
+            error_log('Kanboard: user Unknown authentication failure');
+        }
     }
 }