Investigate captcha after failed logins

AtlasOfLivingAustralia / ala-cas-5

ALA CAS 5 implementation

Apache License 2.0

0 stars 11 forks source link

Investigate captcha after failed logins #21

Closed sbearcsiro closed 5 years ago

sbearcsiro commented 5 years ago

Prevent brute forcing of passwords by ensuring a captcha is required after 'n' failed logins.

https://apereo.github.io/cas/5.3.x/integration/Configuring-Google-reCAPTCHA.html

sbearcsiro commented 5 years ago

CAS reCAPTCHA support is always on or off, it does not integrate with authentication throttling. Closing this ticket unless always on reCAPTCHA support is requested.