Currently the system will go into lockout mode if three tokens are entered, no matter whether they are allowed tokens or disallowed tokens.
There is a case that only continued dis-allowed tokens attempts should trigger a lockout, I believe this should always be the case so it will be hard-coded that only bad tokens will trigger lockout.
Currently the system will go into lockout mode if three tokens are entered, no matter whether they are allowed tokens or disallowed tokens.
There is a case that only continued dis-allowed tokens attempts should trigger a lockout, I believe this should always be the case so it will be hard-coded that only bad tokens will trigger lockout.