Current Behaviour

User session is not audited.

Expected Behaviour

User sessions are audited and a distinction is made in the audit log between a successful and failed session create event.

customer is looking for the following audit logs:

• Login, success:
• Login, Failed:
• User Account change password, success
• User Account change password, failure
• User Account locked, success:

Release Notes:

• Removed audit logs for login/logout success
• Login and logout are audited by `UserSession`. `created` for login, `revoked_at` for logout.
• Password change is audited by `User#password_digest`
• A new audit log is generated when the user fails trying to change its password.
• All above is valid for admin and developer portals.