Team-uMigrate / umigrate

Source code for the uMigrate project
13 stars 2 forks source link

API: Login failure attempt limit and timeout #407

Closed deandrebaker closed 3 years ago

deandrebaker commented 3 years ago

We need to implement a login failure attempt limit of 5 attempts in order to mitigate brute-force cyber attacks. We also want a cool-down of 5 min before the user can try to login in again with 5 new attempts.

We can try using this package https://pypi.org/project/django-axes/1.5.0/ in our project

bringuy commented 3 years ago

Make sure to add the pip package to requirements.txt