[ 
https://issues.apache.org/jira/browse/OFBIZ-10507?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16572869#comment-16572869
 ] 

Benjamin Jugl commented on OFBIZ-10507:
---------------------------------------

Let me rephrase: What relevant information is there, to know if a user entered 
an invalid password for the developer? Error log should be reduced to relevant 
entries, so that the crucial errors can be easier identified.

> LoginServices.userLogin: Respond "fail" instead of "error" to avoid the 
> (automatic service engine) logging of a stack trace on missing/invalid 
> credentials
> ----------------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: OFBIZ-10507
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-10507
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: framework
>            Reporter: Benjamin Jugl
>            Assignee: Benjamin Jugl
>            Priority: Minor
>         Attachments: 
> OFBIZ-10507_org.apache.ofbiz.common.login.LoginServices.patch
>
>
> There are a lot of login-related entries in the logfile, that stem from user 
> related errors (like no or wrong password, user not found and so on). To 
> reduce this, the patch introduces a distinction between ERROR messages and 
> FAIL messages in the Service-Result.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to