prevent in-app brute force

strongloop / strong-arc

StrongLoop Arc has been replaced by API Connect. We recommend Arc users move to the Essentials edition of API Connect. If you have questions, please email reachsl@us.ibm.com.

http://strongloop.com/

Other

114 stars 36 forks source link

prevent in-app brute force #249

Open altsang opened 9 years ago

altsang commented 9 years ago

nginx currently used to throttle requests per second to help prevent brute force against SL auth service, we should introduce some level of deterrence within the app itself

bajtos commented 9 years ago

Who's the best person to implement this - @ritch? @raymondfeng? @bajtos?