Files
FreshRSS/p
Jam Balaya 988c678634 Fever API: log the client IP address on authentication failure (#8981)
A failed Fever API auth returns {"auth":0} with HTTP 200, so from the web
server log a failure is indistinguishable from a success and fail2ban
cannot act. The failure was already logged to API_LOG, but without the
client IP. Append the remote IP (Minz_Request::connectionRemoteAddress())
so a fail2ban filter watching data/users/_/log_api.txt can ban repeated
attempts.

For https://github.com/FreshRSS/FreshRSS/issues/6814

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-04 21:33:09 +02:00
..
2025-09-05 15:56:46 +02:00
2025-09-27 14:40:35 +02:00
2014-01-03 22:54:25 +01:00