Failed attemps clearing - Githubissues

blossom-project / blossom

Blossom is a Java framework based on Spring-Boot which enables you to realize your projects quickly and smoothly. It comes with several modules and tools made to ease and speed up your development process.

http://blossom-project.com

Apache License 2.0

21 stars 21 forks source link

Failed attemps clearing #208

Open RLejolivet opened 5 years ago

RLejolivet commented 5 years ago

When a user has too many failed login attempts, its account is locked for a time. There is currently no way to clear the lock.

Suggested improvements:

On the "sessions" page, show the time for which the account is locked
On the "sessions" page, add a "clear" button so an admin may unlock a user's account, without having to restart the project
Make number of attempts / lock timeout configurable

Other possible improvements:

Store failed logging information in the database, so it is shared when having multiple instances. Or at least a blossom-managed cache