🛑 Security Logging and Monitoring Failure

This demo shows a login flow that does not log failed authentication attempts — leaving it vulnerable to brute-force and credential stuffing attacks.

🧪 Test Instructions

  1. Login with valid credentials to confirm successful login:
  2. Username: admin, Password: password123
  3. Now try logging in with invalid credentials multiple times.
  4. Notice that there is no record or log of these failed attempts — a major monitoring gap.

📜 Monitoring Logs

No logs recorded — even if attackers try brute-forcing:

(No logs available)