Hi SuperTokens! Question: How to enable auth error...
# support-questions-legacy
a
Hi SuperTokens! Question: How to enable auth error logging? We need this for compliance reasons. I see only successful 200 response with "status": "WRONG_CREDENTIALS_ERROR" which is not sufficient for that. On the auth docker i see only "API ended: /recipe/signin. Method: POST" which also does not tell anything about the error. Please advice how this can be implemented. We use Nest.js
I see here https://hub.docker.com/r/supertokens/supertokens-postgresql option LOG_LEVEL - maybe it will help, but there are no possible values for it. please suggest
r
you can override all the recipe functions in our SDK and then in there, call the original impelmentation and log the status / response from the original implementation call before returning the response from the override
a
i got the idea: to override emailPasswordSignIn and look for WRONG_CREDENTIALS_ERROR in the response, then log requested user ID and other info, right?
r
yes
a
thanks a lot! what about LOG_LEVEL on the docker? how to use it?
a
also is there any possibility to protect email sign in from brute force attack? i mean some limit of erroneous requests from same IP or similar
r
it is.. via overrides, you will need to implement it on your own
a
ok got you! thanks
would be cool to have it as a core feature by the way
r
agreed. We will add it eventually
4 Views