summary refs log tree commit diff
diff options
context:
space:
mode:
authorDavid Baker <dbkr@users.noreply.github.com>2017-11-01 14:11:28 +0000
committerGitHub <noreply@github.com>2017-11-01 14:11:28 +0000
commit691cc4e0364470fe8af7b3cd2d8e0a52e4219ae7 (patch)
tree33d63b30297d76a5d69c97b4ced0db4dd3f533b3
parentMerge pull request #2612 from matrix-org/luke/groups-room-relationship-is-public (diff)
parentApparently this is python (diff)
downloadsynapse-691cc4e0364470fe8af7b3cd2d8e0a52e4219ae7.tar.xz
Merge pull request #2618 from matrix-org/dbkr/log_login_requests
Log login requests
-rw-r--r--synapse/rest/client/v1/login.py10
1 files changed, 10 insertions, 0 deletions
diff --git a/synapse/rest/client/v1/login.py b/synapse/rest/client/v1/login.py
index d24590011b..11a2aab84b 100644
--- a/synapse/rest/client/v1/login.py
+++ b/synapse/rest/client/v1/login.py
@@ -166,6 +166,16 @@ class LoginRestServlet(ClientV1RestServlet):
         Returns:
             (int, object): HTTP code/response
         """
+        # Log the request we got, but only certain fields to minimise the chance of
+        # logging someone's password (even if they accidentally put it in the wrong
+        # field)
+        logger.info(
+            "Got login request with identifier: %r, medium: %r, address: %r, user: %r",
+            login_submission.get('identifier'),
+            login_submission.get('medium'),
+            login_submission.get('address'),
+            login_submission.get('user'),
+        )
         login_submission_legacy_convert(login_submission)
 
         if "identifier" not in login_submission: