Page MenuHomePhabricator

Measure failed logins due to accounts being locked
Open, Needs TriagePublic3 Story Points

Description

Before implementing {T158473} we should measure if it will actually be used.

In T158473#3717162, @Legoktm wrote:
Before actual development occurs, I think it would be a good idea to instrument whether if this is something that would be actually used - just increment a statsd metric when a login is denied due to the account being locked or something (the first case).


Acceptance criteria

  • Determine if failed logins due to locks are being logged.
  • If not, add logging to measure when a login is denied due to the account being locked

We'll look at these measurements after one month to determine if/how to build cookie locking.

Related Objects

StatusAssignedTask
OpenNone

Event Timeline

TBolliger created this task.Nov 3 2017, 3:44 PM
TBolliger moved this task from Untriaged to Cards ready to be discussed on the Anti-Harassment board.
TBolliger updated the task description. (Show Details)Nov 3 2017, 3:52 PM
Bawolff added a subscriber: Bawolff.Nov 3 2017, 4:21 PM

Fwiw i suspect (but am not sure) that this info is also logged in the badpass log

TBolliger updated the task description. (Show Details)Nov 3 2017, 6:14 PM
TBolliger set the point value for this task to 3.
Restricted Application added a subscriber: MGChecker. · View Herald TranscriptAug 19 2018, 9:50 AM