HumbleHominid / ACM-Manager

Ember.js web application that aims to better connect the Montana Tech ACM club to its members. This will be achieved by allowing officers to post information about meeting and event dates easily to a centralized place for members to check. In addition, after meetings have been completed, the meeting minutes should be able to be uploaded for members that were unable to attend. Past this it would be good to be able to keep an active member list for the officers. The member list could be used to track dues and other pertinent information about members (such as attendance, t-shirt orders, etc.) This application should be able to be extended as its starts to be used in case of new use cases becoming apparent. One possibility of an extension may be to have the application help send out email reminders and meeting minutes. This application will be used by officers and members of the Montana Tech ACM, as well as the public.
https://katie.mtech.edu/~acmuser
5 stars 0 forks source link

Rate limit login attempts on backend. #32

Open trevorlbrooks opened 7 years ago

trevorlbrooks commented 7 years ago

Backend should track IP and account access to limit login attempts. IP's and accounts should be locked if there are more than X attempts within a given time period.

This will limit the potential for brute forcing over the API.

API Change: API may wish to state that the login attempt has been blocked or may wish to just keep "allowing" attempts. Further discussion required.