Debug logs on how a CAPTCHA was cleared
Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.
Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Summary
Bitbucket administrators or other parties may be interested in how a CAPTCHA was cleared for a specific user, when it was done, and who cleared it.
If debug logging was enabled, these details can be found in the Bitbucket application logs (atlassian-bitbucket.log or atlassian-bitbucket-<yyyy-mm-dd>.log for past dates).
Solution
Look for the following log entries:
Cleared through a successful CAPTCHA challenge
The log below indicates the CAPTCHA was cleared by the user (e.g. user1) through a successful challenge response.
1
2022-06-23 16:55:46,897 DEBUG [http-nio-8081-exec-5] @1S969HQx1015x832x0 rpyevr 127.0.0.1 "POST /j_atl_security_check HTTP/1.1" c.a.s.i.auth.DefaultCaptchaService user1: Cleared 5 failed authentication attempts after successful challengeCleared through the "Clear CAPTCHA" button on the user profile page
The log below indicates that the CAPTCHA was cleared by an admin user by clicking the "Clear CAPTCHA" button on the user page (in Administration > Users).
1
2022-06-23 16:53:50,008 DEBUG [http-nio-8081-exec-6] admin1 @1S969HQx1013x792x0 1hk8pjv 127.0.0.1 "DELETE /admin/users/captcha HTTP/1.1" c.a.s.i.auth.DefaultCaptchaService user1: Failed authentication attempts clearedIn the sample, admin1 cleared the CAPTCHA for user1.
Cleared through REST API
The log below indicates that the CAPTCHA was cleared by calling the DELETE /rest/api/1.0/admin/users/captcha REST API.
1
2022-06-23 16:48:26,987 DEBUG [https-jsse-nio-8443-exec-2] admin1 @1S969HQx1013x792x0 127.0.0.1 "DELETE /rest/api/1.0/admin/users/captcha HTTP/1.1" c.a.s.i.auth.DefaultCaptchaService user1: Failed authentication attempts clearedIn the sample, admin1 cleared the CAPTCHA for user1 through REST.
Related Link
Was this helpful?