Adds brute force detection \ protection

lcpojr / watcher_ex

An Oauth2 server interelly in elixir.

Apache License 2.0

10 stars 3 forks source link

Adds brute force detection \ protection #29

Open lcpojr opened 3 years ago

lcpojr commented 3 years ago

We have to block an subject that fails on sign in continuously temporarilly. This will help a lot to prevent this kind of attack because any attempt after subject be blocked will not succeed.

lcpojr commented 3 years ago

We already have an minimum brute force protection by blocking the user temporarily. Now we have to start testing it and see if it works in larger number of attempts.