search

owncloud / brute_force_protection

Brute-force protection app for ownCloud
GNU General Public License v2.0
6 stars 5 forks source link

Tracking Testing Results for Brute Force Protection 1.1.0. #132

Closed davitol closed 4 years ago

davitol commented 4 years ago

Tested with oC 10.5 and tarball located here:https://github.com/owncloud/brute_force_protection/releases/download/v1.1.0RC2/brute_force_protection.tar.gz

manual tests

set threshold-time=15 fail-tolerance=4 ban-period=30

Test scenario expected result result comment
enter invalid data in UI settings data is not accepted ✅
4 invalid logins but within 20 sec, correct login login is possible ✅
block login, wait 30sec, correct login login is possible again ✅
block login, wait 30sec, 3 invalid logins, correct login login is possible ✅
block login, wait 30sec, 4 invalid logins, correct login login is blocked ✅
block login, login with a real other IP but same user login is possible ✅
block login, login with a real other IP but same user, login again from the first IP login is blocked ✅
block login, force desktop client to resync sync does work ✅
block login, force desktop client to resync, try correct login in browser login blocked ✅
set ban-period=600s, block user, invalid login, check message correct no of min should be reported ✅
set threshold-time=30 fail-tolerance=2 ban-period=3000, block user, wait 30sec (threshold-time), correct login login is blocked ✅
login with correct password, in different browser session block login for this user, refresh first session, try correct login in second session login is blocked ✅
davitol commented 4 years ago

Changelog for 1.1.0 RC2

Added

Fixed

davitol commented 4 years ago

Changelog for 1.1.0 RC3

Added

Fixed