failed login activates also event type "user.login.success"

wiebe

Hi,
When I trigger an failed login by giving the wrong password, I get two webhook events
an user.login.success and an user.login.failed, I was expecting only the user.login.failed event.

i'm running version version 1.18.5

regards,
Wiebe Kloosterman

{
"event": {
"type": "user.login.success",
"authenticationType": "PASSWORD",
"connectorId": "e3306678-a53a-4964-9040-1c96f36dda72",
"createInstant": 1598471360450,
"id": "7ba63922-c3af-4fef-834c-d9eb6292b987",
"tenantId": "39333235-3733-3030-3935-663165333532",
"user": {
"active": true,
"connectorId": "e3306678-a53a-4964-9040-1c96f36dda72",
"email": "wiebe+test123@removed.com",
"firstName": "Wiebe",
"id": "6f3c73f5-b819-4757-8bc3-2880909f5bfa",
"insertInstant": 1570553590075,
"lastLoginInstant": 1598471360431,
"lastName": "removed",
"lastUpdateInstant": 1598469204779,
"mobilePhone": "removed",
"passwordChangeRequired": false,
"passwordLastUpdateInstant": 1598469134376,
"registrations": [
{
"applicationId": "9ac3f7d7-91d6-475a-a676-c6d6ec2b925b",
"id": "75990a12-3094-47b5-acf3-9fb6049d6485",
"insertInstant": 1598469150193,
"lastLoginInstant": 1598469150194,
"lastUpdateInstant": 1598469150193,
"usernameStatus": "ACTIVE",
"verified": true
}
],
"tenantId": "39333235-3733-3030-3935-663165333532",
"twoFactorDelivery": "None",
"twoFactorEnabled": false,
"usernameStatus": "ACTIVE",
"verified": true
}
}
}

{
"event": {
"type": "user.login.failed",
"authenticationType": "PASSWORD",
"createInstant": 1598471360430,
"id": "a9d5cac1-db95-4c90-8185-88938fa4d79d",
"tenantId": "39333235-3733-3030-3935-663165333532",
"user": {
"active": true,
"connectorId": "e3306678-a53a-4964-9040-1c96f36dda72",
"email": "wiebe+test123@removed.com",
"firstName": "Wiebe",
"id": "6f3c73f5-b819-4757-8bc3-2880909f5bfa",
"insertInstant": 1570553590075,
"lastLoginInstant": 1598471311529,
"lastName": "removed",
"lastUpdateInstant": 1598469204779,
"mobilePhone": "removed",
"passwordChangeRequired": false,
"passwordLastUpdateInstant": 1598469134376,
"registrations": [
{
"applicationId": "9ac3f7d7-91d6-475a-a676-c6d6ec2b925b",
"id": "75990a12-3094-47b5-acf3-9fb6049d6485",
"insertInstant": 1598469150193,
"lastLoginInstant": 1598469150194,
"lastUpdateInstant": 1598469150193,
"usernameStatus": "ACTIVE",
"verified": true
}
],
"tenantId": "39333235-3733-3030-3935-663165333532",
"twoFactorDelivery": "None",
"twoFactorEnabled": false,
"usernameStatus": "ACTIVE",
"verified": true
}
}
}

dan

Sure looks like a bug to me. I was able to replicate.

Filed an issue here: https://github.com/FusionAuth/fusionauth-issues/issues/838 if you want to track it.