Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

Add ratelimiting on failed login attempts #4865

Merged
merged 2 commits into from
Mar 18, 2019

Conversation

babolivier
Copy link
Contributor

Depends on #4821

Add a ratelimiter that denies login requests for a given amount of time if there's been too many failed login attempts for the account the client is trying to log into.

@codecov
Copy link

codecov bot commented Mar 15, 2019

Codecov Report

Merging #4865 into develop will increase coverage by 0.01%.
The diff coverage is 100%.

@@             Coverage Diff             @@
##           develop    #4865      +/-   ##
===========================================
+ Coverage    59.57%   59.59%   +0.01%     
===========================================
  Files          326      326              
  Lines        33921    33925       +4     
  Branches      5597     5597              
===========================================
+ Hits         20209    20218       +9     
+ Misses       12298    12294       -4     
+ Partials      1414     1413       -1

@babolivier babolivier force-pushed the babolivier/ratelimit-login-failed branch from 982837b to 8812d1d Compare March 15, 2019 17:51
Copy link
Member

@richvdh richvdh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@richvdh richvdh merged commit 651ad8b into develop Mar 18, 2019
@babolivier babolivier deleted the babolivier/ratelimit-login-failed branch April 17, 2019 08:34
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants