{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1122","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1122/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1122/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1122/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/1122","id":64312837,"number":1122,"title":"Authentication Failure logs as an error","user":{"login":"michaeldotknox","id":9351423,"avatar_url":"https://avatars.githubusercontent.com/u/9351423?v=3","gravatar_id":"","url":"https://api.github.com/users/michaeldotknox","html_url":"https://github.com/michaeldotknox","followers_url":"https://api.github.com/users/michaeldotknox/followers","following_url":"https://api.github.com/users/michaeldotknox/following{/other_user}","gists_url":"https://api.github.com/users/michaeldotknox/gists{/gist_id}","starred_url":"https://api.github.com/users/michaeldotknox/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/michaeldotknox/subscriptions","organizations_url":"https://api.github.com/users/michaeldotknox/orgs","repos_url":"https://api.github.com/users/michaeldotknox/repos","events_url":"https://api.github.com/users/michaeldotknox/events{/privacy}","received_events_url":"https://api.github.com/users/michaeldotknox/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-03-25T16:29:44Z","updated_at":"2015-03-25T17:45:14Z","closed_at":null,"body":"I'm wiring up events for our implementation using Resource Owner flow.  I noticed that user authentication failures result in an Error being logged.  Is this mainly to accommodate Pen Tests?  I want to be able to proper direct the messages so they can be properly handled."},"comment":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/comments/86141258","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/1122#issuecomment-86141258","issue_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/1122","id":86141258,"user":{"login":"michaeldotknox","id":9351423,"avatar_url":"https://avatars.githubusercontent.com/u/9351423?v=3","gravatar_id":"","url":"https://api.github.com/users/michaeldotknox","html_url":"https://github.com/michaeldotknox","followers_url":"https://api.github.com/users/michaeldotknox/followers","following_url":"https://api.github.com/users/michaeldotknox/following{/other_user}","gists_url":"https://api.github.com/users/michaeldotknox/gists{/gist_id}","starred_url":"https://api.github.com/users/michaeldotknox/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/michaeldotknox/subscriptions","organizations_url":"https://api.github.com/users/michaeldotknox/orgs","repos_url":"https://api.github.com/users/michaeldotknox/repos","events_url":"https://api.github.com/users/michaeldotknox/events{/privacy}","received_events_url":"https://api.github.com/users/michaeldotknox/received_events","type":"User","site_admin":false},"created_at":"2015-03-25T17:45:14Z","updated_at":"2015-03-25T17:45:14Z","body":"I think it depends.  If best practices says that they should be logged as an error, then I'll change my logging configuration so I can log those to a different place or in a different way.  I can certainly see why those might want to be logged that way to try to catch someone attacking the system.\r\nBut at the same time, it would be nice if that was a way to turn that off, or turn in down to a warning or even an info.  We are already capturing authentication failures and successes, so we end up logging this information twice."}}