Project

General

Profile

Actions
Copy link

Feature #26887

closed

graphql login: count login failures as brute force attempts

Added by Timo Goebel over 5 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Timo Goebel
Category:
API
Target version:
1.23.0
Difficulty:
Triaged:
No
Bugzilla link:
Pull request:
https://github.com/theforeman/foreman/pull/6799
Fixed in Releases:
1.23.0
Found in Releases:
Red Hat JIRA:

Description

In #26487 a graphql mutation was added that allows users to sign in via username/password. The user is then issued a JWT token. Failed login attempts at this mutation should count as bruteforce attemps as with the login form.

Related issues 2 (0 open — 2 closed)

Related to Foreman - Feature #26487: add graphql jwt login mutationClosedTimo GoebelActions
Related to Foreman - Bug #28860: Wrong Error Message/Return code getting after exceeding the 'failed_login_attempts_limit'ClosedDominik MatoulekActions
Actions
Copy link

Also available in: Atom PDF