Summary

Bitbucket administrators or other parties may be interested on how a CAPTCHA was cleared for a specific user, when it was done and who cleared it.

If debug logging was enabled, these details can be found in the Bitbucket application logs (atlassian-bitbucket.log or atlassian-bitbucket-<yyyy-mm-dd>.log for past dates).

Solution

Look for the following log entries:

Cleared through successful CAPTCHA challenge

The log below indicates the CAPTCHA was cleared by the user (e.g. user1) through a successful challenge response.

2022-06-23 16:55:46,897 DEBUG [http-nio-8081-exec-5] @1S969HQx1015x832x0 rpyevr 127.0.0.1 "POST /j_atl_security_check HTTP/1.1" c.a.s.i.auth.DefaultCaptchaService user1: Cleared 5 failed authentication attempts after successful challenge

Cleared through the "Clear CAPTCHA" button on the users profile page

The log below indicates that the CAPTCHA was cleared by an admin user by clicking the "Clear CAPTHA" button on the user page (in Administration > Users).

2022-06-23 16:53:50,008 DEBUG [http-nio-8081-exec-6] admin1 @1S969HQx1013x792x0 1hk8pjv 127.0.0.1 "DELETE /admin/users/captcha HTTP/1.1" c.a.s.i.auth.DefaultCaptchaService user1: Failed authentication attempts cleared

In the sample, admin1 cleared the CAPTCHA for user1.

Cleared through REST API

The log below indicates that the CAPTCHA was cleared by calling the DELETE /rest/api/1.0/admin/users/captcha REST API.

2022-06-23 16:48:26,987 DEBUG [https-jsse-nio-8443-exec-2] admin1 @1S969HQx1013x792x0 127.0.0.1 "DELETE /rest/api/1.0/admin/users/captcha HTTP/1.1" c.a.s.i.auth.DefaultCaptchaService user1: Failed authentication attempts cleared

In the sample, admin1 cleared the CAPTCHA for user1 through REST.

Related Link

How to configure CAPTCHA in Bitbucket Server