GEWIS / gewisweb

GEWIS Website
https://gewis.nl
GNU General Public License v3.0
16 stars 33 forks source link

Add `user:gdpr:delete-old-loginattempts` command to remove old `LoginAttempt`s #1852

Closed tomudding closed 1 week ago

tomudding commented 1 week ago

Description

There is no retention period specified for old (failed) LoginAttempts in GEWIS' privacy policy. Previously, I did this manually and removed any records older than 2 years, however, as I am doing less and less for GEWISWEB this process should be automated.

As such, this command will automate the removal of any (failed) LoginAttempts older than 3 months.

Types of changes