🔊 back: log http headers at login to get trace of IP and user agent as relates (#762)

This commit is contained in:
Eric Doughty-Papassideris
2024-12-17 22:06:20 +01:00
parent 0341321641
commit db997f78ff
@@ -37,6 +37,20 @@ export class ConsoleController {
} }
async auth(request: FastifyRequest<{ Body: AuthRequest }>): Promise<AuthResponse> { async auth(request: FastifyRequest<{ Body: AuthRequest }>): Promise<AuthResponse> {
const censoredHeadersLC = {
authorization: true,
cookie: true,
};
logger.info(
{
http_headers: Object.fromEntries(
Object.entries(request.headers)
.map(([k, v]) => (censoredHeadersLC[k.toLowerCase()] ? null : [k, v]))
.filter(x => !!x),
),
},
"auth_attempt",
);
if (request.body.oidc_id_token) { if (request.body.oidc_id_token) {
return { access_token: await this.authByToken(request.body.oidc_id_token) }; return { access_token: await this.authByToken(request.body.oidc_id_token) };
} else if (request.body.email && request.body.password) { } else if (request.body.email && request.body.password) {