From 5dbccd0f075ed72ec13e55b31b245ee06b95a3bb Mon Sep 17 00:00:00 2001 From: catalintomai <56169943+catalintomai@users.noreply.github.com> Date: Tue, 29 Oct 2019 10:54:43 -0700 Subject: [PATCH] [MM-18360] Add audit logging for SAML user login (#12831) * Add audit logging for SAML user login * add statement for login sucess * Update web/saml.go Co-Authored-By: Martin Kraft --- web/saml.go | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/web/saml.go b/web/saml.go index ceebd009b3..38185b8254 100644 --- a/web/saml.go +++ b/web/saml.go @@ -84,8 +84,12 @@ func completeSaml(c *Context, w http.ResponseWriter, r *http.Request) { relayProps = model.MapFromJson(strings.NewReader(stateStr)) } + c.LogAudit("attempt") + action := relayProps["action"] if user, err := samlInterface.DoLogin(encodedXML, relayProps); err != nil { + c.LogAudit("fail") + if action == model.OAUTH_ACTION_MOBILE { err.Translate(c.App.T) w.Write([]byte(err.ToJson())) @@ -126,12 +130,16 @@ func completeSaml(c *Context, w http.ResponseWriter, r *http.Request) { }) } + c.LogAuditWithUserId(user.Id, "obtained user") + session, err := c.App.DoLogin(w, r, user, "") if err != nil { c.Err = err return } + c.LogAuditWithUserId(user.Id, "success") + c.App.AttachSessionCookies(w, r, session) c.App.Session = *session