search

aspnet / Identity

[Archived] ASP.NET Core Identity is the membership system for building ASP.NET Core web applications, including membership, login, and user data. Project moved to https://github.com/aspnet/AspNetCore
Apache License 2.0
1.96k stars 870 forks source link

Wrong password logging with Warning level #1871

Closed Freakazoid182 closed 6 years ago

Freakazoid182 commented 6 years ago

In my opinion this should be an Information level warning. What is the reason behind a Warning level here?

https://github.com/aspnet/Identity/blob/c7276ce2f76312ddd7fccad6e399da96b9f6fae1/src/Core/UserManager.cs#L711

blowdart commented 6 years ago

Because some people use those logs to monitor for attacks. Hence it's a warning that something you might want to look at is happening. It won't change.