I found in the logfile for a successfull login:
2 Oct 15:04:27 - [audit] {"event":"auth.login.revoke","level":98,"user":{"username":"abcd","permissions":"*"},"path":"/auth/revo ke","ip":"192.xxx.xxx.xxx","timestamp":1696259067189}
Unfortunately for a not succussfull login attempt I can't find the ip-address in the log-entry.
2 Oct 15:10:14 - [audit] {"event":"auth.login.fail.credentials","username":"xxx","client":"node-red-editor","scope":"","level":98 ,"timestamp":1696259414151}
This does not allow me to take action on this ip-address, e.g. block it.
Feature request:
Please add the ip-address of origin for a non successfull login attempt.