{"action":"created","issue":{"url":"https://api.github.com/repos/OWASP/ASVS/issues/93","repository_url":"https://api.github.com/repos/OWASP/ASVS","labels_url":"https://api.github.com/repos/OWASP/ASVS/issues/93/labels{/name}","comments_url":"https://api.github.com/repos/OWASP/ASVS/issues/93/comments","events_url":"https://api.github.com/repos/OWASP/ASVS/issues/93/events","html_url":"https://github.com/OWASP/ASVS/issues/93","id":115053413,"number":93,"title":"requirement v2.12 revise proposal: Verify that all authentication decisions are logged","user":{"login":"boos","id":530590,"avatar_url":"https://avatars.githubusercontent.com/u/530590?v=3","gravatar_id":"","url":"https://api.github.com/users/boos","html_url":"https://github.com/boos","followers_url":"https://api.github.com/users/boos/followers","following_url":"https://api.github.com/users/boos/following{/other_user}","gists_url":"https://api.github.com/users/boos/gists{/gist_id}","starred_url":"https://api.github.com/users/boos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/boos/subscriptions","organizations_url":"https://api.github.com/users/boos/orgs","repos_url":"https://api.github.com/users/boos/repos","events_url":"https://api.github.com/users/boos/events{/privacy}","received_events_url":"https://api.github.com/users/boos/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/OWASP/ASVS/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"closed","locked":false,"assignee":{"login":"vanderaj","id":5029993,"avatar_url":"https://avatars.githubusercontent.com/u/5029993?v=3","gravatar_id":"","url":"https://api.github.com/users/vanderaj","html_url":"https://github.com/vanderaj","followers_url":"https://api.github.com/users/vanderaj/followers","following_url":"https://api.github.com/users/vanderaj/following{/other_user}","gists_url":"https://api.github.com/users/vanderaj/gists{/gist_id}","starred_url":"https://api.github.com/users/vanderaj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vanderaj/subscriptions","organizations_url":"https://api.github.com/users/vanderaj/orgs","repos_url":"https://api.github.com/users/vanderaj/repos","events_url":"https://api.github.com/users/vanderaj/events{/privacy}","received_events_url":"https://api.github.com/users/vanderaj/received_events","type":"User","site_admin":false},"assignees":[{"login":"vanderaj","id":5029993,"avatar_url":"https://avatars.githubusercontent.com/u/5029993?v=3","gravatar_id":"","url":"https://api.github.com/users/vanderaj","html_url":"https://github.com/vanderaj","followers_url":"https://api.github.com/users/vanderaj/followers","following_url":"https://api.github.com/users/vanderaj/following{/other_user}","gists_url":"https://api.github.com/users/vanderaj/gists{/gist_id}","starred_url":"https://api.github.com/users/vanderaj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vanderaj/subscriptions","organizations_url":"https://api.github.com/users/vanderaj/orgs","repos_url":"https://api.github.com/users/vanderaj/repos","events_url":"https://api.github.com/users/vanderaj/events{/privacy}","received_events_url":"https://api.github.com/users/vanderaj/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/OWASP/ASVS/milestones/4","html_url":"https://github.com/OWASP/ASVS/milestones/3.0.1","labels_url":"https://api.github.com/repos/OWASP/ASVS/milestones/4/labels","id":1369880,"number":4,"title":"3.0.1","description":"","creator":{"login":"vanderaj","id":5029993,"avatar_url":"https://avatars.githubusercontent.com/u/5029993?v=3","gravatar_id":"","url":"https://api.github.com/users/vanderaj","html_url":"https://github.com/vanderaj","followers_url":"https://api.github.com/users/vanderaj/followers","following_url":"https://api.github.com/users/vanderaj/following{/other_user}","gists_url":"https://api.github.com/users/vanderaj/gists{/gist_id}","starred_url":"https://api.github.com/users/vanderaj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vanderaj/subscriptions","organizations_url":"https://api.github.com/users/vanderaj/orgs","repos_url":"https://api.github.com/users/vanderaj/repos","events_url":"https://api.github.com/users/vanderaj/events{/privacy}","received_events_url":"https://api.github.com/users/vanderaj/received_events","type":"User","site_admin":false},"open_issues":10,"closed_issues":15,"state":"open","created_at":"2015-10-22T08:52:47Z","updated_at":"2016-06-29T11:14:17Z","due_on":"2016-06-30T22:00:00Z","closed_at":null},"comments":3,"created_at":"2015-11-04T13:39:38Z","updated_at":"2016-06-29T11:14:17Z","closed_at":"2016-06-29T11:14:17Z","body":"I suggest to revise requirement v2.12 from:\r\n* Verify that all **suspicious** authentication decisions are logged. This should include requests with relevant metadata needed for security investigations.\r\n\r\nto:\r\n\r\n* Verify that all ~~suspicious~~ authentication decisions are logged. This should include requests with relevant metadata needed for security investigations.\r\n\r\nIn my opinion:\r\n* the definition of suspicious is subjective and lack a common definition\r\n* all authentication decisions must be logged "},"comment":{"url":"https://api.github.com/repos/OWASP/ASVS/issues/comments/229327161","html_url":"https://github.com/OWASP/ASVS/issues/93#issuecomment-229327161","issue_url":"https://api.github.com/repos/OWASP/ASVS/issues/93","id":229327161,"user":{"login":"vanderaj","id":5029993,"avatar_url":"https://avatars.githubusercontent.com/u/5029993?v=3","gravatar_id":"","url":"https://api.github.com/users/vanderaj","html_url":"https://github.com/vanderaj","followers_url":"https://api.github.com/users/vanderaj/followers","following_url":"https://api.github.com/users/vanderaj/following{/other_user}","gists_url":"https://api.github.com/users/vanderaj/gists{/gist_id}","starred_url":"https://api.github.com/users/vanderaj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vanderaj/subscriptions","organizations_url":"https://api.github.com/users/vanderaj/orgs","repos_url":"https://api.github.com/users/vanderaj/repos","events_url":"https://api.github.com/users/vanderaj/events{/privacy}","received_events_url":"https://api.github.com/users/vanderaj/received_events","type":"User","site_admin":false},"created_at":"2016-06-29T11:14:17Z","updated_at":"2016-06-29T11:14:17Z","body":"Fixed. \r\n\r\n![image](https://cloud.githubusercontent.com/assets/5029993/16450092/603c216c-3dfb-11e6-8213-3757b110414d.png)\r\n"}}
{"actor":{"display_login":"vanderaj"}}