how can i log username in wso2 logs in case of failed attempt of a user in wso2 identity server

Shubhra Paul 0
Viewed 32

I wanted to log username and in case of login failed scenario in wso2 identity server using adaptive authentication

code snippet for adaptive authentication

    var abc = function(context) {
    executeStep(1, {
        onSuccess: function (context) {
            var user = context.currentKnownSubject;
            
                }
            }
        },
        onFail: function (context){
           
            var username = context.request.params.userame;
            var user = context.currentKnownSubject;
            //i have used these two approach but the username is coming as null

            
        }
    });
};

could anyone please help as how to do it..

wso2-identity-server wso2
2 Answers

var user = context.currentKnownSubject; or var user = context.steps[1].subject (change the authentication step inside [] as required) can be used to refer the authenticated user object that represents the user details. So, on the successful authentication step, you can get the authenticated user's username by context.steps[1].subject.username or context.currentKnownSubject.username

Since there is no authenticated subject set on authentication failure, we can't access the user details from context.currentKnownSubject / context.steps[1].subject under onFail function.(Related issue: https://github.com/wso2/product-is/issues/3950).

But you can retrieve the user input username as context.request.params.username[0] (NOTE: var username = context.request.params.userame; in your code has a typo; userame)

Try the following:

var onLoginRequest = function(context) {
    executeStep(1, {
        onSuccess: function (context) {
            Log.info('Username: ' + context.steps[1].subject.username);
            Log.info('Username: ' + context.currentKnownSubject.username);
        },
        onFail: function (context){
            Log.info('Username: ' + context.request.params.username[0]);
        }
    });
};
Anuradha Karunarathna0

Try adding the following.

Log.info('User ' + context.currentKnownSubject.identifier);

I would not recommend logging the username when you are in a production environment because it can reveal sensitive information about the user (if you are using the email as the username). Make sure to remove the logs (comment them) once you are in production.

You can find more information about adaptive auth in here.

Sominda Gamage0
Related