Table of Contents

Class UserLoginFailureEvent

Namespace
Fdyay.IdentityServer.Events
Assembly
Fdyay.IdentityServer.Core.dll

A sign-in attempt was refused.

public class UserLoginFailureEvent : Event
Inheritance
UserLoginFailureEvent
Inherited Members

Remarks

The event a host counts. Before it existed, a wrong password produced nothing at all — no event and no log line — so nothing could notice somebody working through a list of them, and the addresses DefaultEventService fills in had no event to be attached to.

It carries the username and no credential. The rejected password is still a password, very often the correct one for some other account, and events go somewhere with a wider audience than the server's own logs. For the same reason the message says a sign-in was refused rather than which half was wrong.

Constructors

UserLoginFailureEvent(string?, string)

A refused sign-in attempt.

public UserLoginFailureEvent(string? username, string message)

Parameters

username string

The user the attempt named, or null when it named none.

message string

That the sign-in was refused — never which half of the credential was wrong.

Properties

ClientId

The application the sign-in was for, where one was waiting. Duende's.

public string? ClientId { get; set; }

Property Value

string

Remarks

The client id for an OpenID Connect request, the service provider's entity id for a SAML one.

Endpoint

Where the attempt was made: UI, the sign-in pages, as Duende names an interactive sign-in.

public string? Endpoint { get; set; }

Property Value

string

Username

Null when the attempt named no user — an external provider that returned no identity.

public string? Username { get; }

Property Value

string