Feature #26887
graphql login: count login failures as brute force attempts
Description
In #26487 a graphql mutation was added that allows users to sign in via username/password. The user is then issued a JWT token. Failed login attempts at this mutation should count as bruteforce attemps as with the login form.
Related issues
Associated revisions
History
#1
Updated by Timo Goebel about 4 years ago
- Related to Feature #26487: add graphql jwt login mutation added
#2
Updated by The Foreman Bot about 4 years ago
- Status changed from New to Ready For Testing
- Pull request https://github.com/theforeman/foreman/pull/6799 added
#3
Updated by Tomer Brisker almost 4 years ago
- Fixed in Releases 1.23.0 added
#4
Updated by Timo Goebel almost 4 years ago
- Status changed from Ready For Testing to Closed
Applied in changeset 601b910faa90b19e79f1f91b02c397841b6c167c.
#5
Updated by Tomer Brisker over 3 years ago
- Related to Bug #28860: Wrong Error Message/Return code getting after exceeding the 'failed_login_attempts_limit' added
fixes #26887 - graphql login: count bruteforce attempts