log failed password

1 files changed, 1 insertions, 1 deletions

diff --git a/routes/users.js b/routes/users.js
index 514c39f5..1d9a4f3d 100644
--- a/routes/users.js
+++ b/routes/users.js
@@ -212,7 +212,7 @@ app.post("/login", async (req, res) => {
       (user.password &&
         !(await bcrypt.compare(req.body.password, user.password)))
     ) {
-      l.warn("invalid username or password attempt");
+      l.warn("invalid username or password attempt", req.body.username, req.body.password);
       return res.status(401).end();
     }