search

ppazos / cabolabs-ehrserver

Open platform to manage and share standardized clinical data, designed by @ppazos at CaboLabs Health Informatics.
https://cabolabs.com
Apache License 2.0
177 stars 110 forks source link

Monitor login attempts #302

Open ppazos opened 8 years ago

ppazos commented 8 years ago

All access to Production Systems must be logged, including login attempts with contextual data (IP/country, timestamp, number of attempts, etc)

This has to do with production system security and intrusion/attack detection.

ppazos commented 7 years ago

I think we can create ActivityLogs for after action execute or after view rendered, so we get the attempt in the before execute, and the wrong login result in the after execute.

ppazos commented 7 years ago

We can add dismissalble notifications with the client ip so admins can take actions from possible attacks

ppazos commented 7 years ago

The failed logins are saved in ActivityLogs.

I tried to save the username but it is not on the params. Asked on stack overflow: https://stackoverflow.com/questions/44489748/get-username-on-failed-login-on-grails-2-5-5-w-spring-security

Will try this later: http://www.redtoad.ca/ataylor/2011/05/logging-spring-security-events-in-grails/