Reduce log level on TOTP failures (#42151)

gravitational · Jun 3, 2024 · 085ebe4 · 085ebe4
1 parent bbc36cf
commit 085ebe4
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/lib/auth/password.go b/lib/auth/password.go
@@ -263,7 +263,10 @@ func (a *Server) checkOTP(user string, otpToken string) (*types.MFADevice, error
 		}
 
 		if err := a.checkTOTP(ctx, user, otpToken, dev); err != nil {
-			log.WithError(err).Errorf("Using TOTP device %q", dev.GetName())
+			log.
+				WithError(err).
+				WithField("device", dev.GetName()).
+				Debug("TOTP device failed verification. This is expected if the user has multiple TOTP devices.")
 			continue
 		}
 		return dev, nil