browsertrix/backend/btrixcloud
Tessa Walsh 5c5ef68a8a
Prevent user from logging in after 5 consecutive failed login attempts until pw is reset (#1281)
Fixes #1270 

After 5 consecutive failed logins from the same user, we now prevent the
user from logging in even with the correct password until they reset it
via their email, or wait an hour.
- After failure threshold is reached, all further login attempts are rejected
- Attempts for invalid email addresses are also tracked
- On 6th try, a reset password email is automatically sent, only once
- Failed login counter resets after an hour of no further logins after last attempted login.

---------
Co-authored-by: Ilya Kreymer <ikreymer@gmail.com>
2023-10-20 14:10:56 -07:00
..
migrations User refactor + remove fastapi_users dependency + update fastapi (#1290) 2023-10-18 10:49:23 -07:00
templates Track pod resource usage, detect OOM crashes, handle auto-scaling (#1235) 2023-10-05 20:41:18 -07:00
__init__.py
auth.py Prevent user from logging in after 5 consecutive failed login attempts until pw is reset (#1281) 2023-10-20 14:10:56 -07:00
basecrawls.py Update user names in crawls and workflows after username update (#1299) 2023-10-19 23:34:49 -07:00
colls.py Storage Ops Refactor (#1257) 2023-10-10 15:04:23 -07:00
crawlconfigs.py Update user names in crawls and workflows after username update (#1299) 2023-10-19 23:34:49 -07:00
crawlmanager.py Storage Ops Refactor (#1257) 2023-10-10 15:04:23 -07:00
crawls.py User refactor + remove fastapi_users dependency + update fastapi (#1290) 2023-10-18 10:49:23 -07:00
db.py User refactor + remove fastapi_users dependency + update fastapi (#1290) 2023-10-18 10:49:23 -07:00
emailsender.py feat: use is_bool to check EMAIL_SMTP_USE_TLS (#1231) 2023-10-02 21:29:36 -07:00
invites.py User refactor + remove fastapi_users dependency + update fastapi (#1290) 2023-10-18 10:49:23 -07:00
k8sapi.py Track pod resource usage, detect OOM crashes, handle auto-scaling (#1235) 2023-10-05 20:41:18 -07:00
main_op.py Update user names in crawls and workflows after username update (#1299) 2023-10-19 23:34:49 -07:00
main.py Update user names in crawls and workflows after username update (#1299) 2023-10-19 23:34:49 -07:00
models.py Prevent user from logging in after 5 consecutive failed login attempts until pw is reset (#1281) 2023-10-20 14:10:56 -07:00
operator.py User refactor + remove fastapi_users dependency + update fastapi (#1290) 2023-10-18 10:49:23 -07:00
orgs.py User refactor + remove fastapi_users dependency + update fastapi (#1290) 2023-10-18 10:49:23 -07:00
pagination.py Move pydantic models to separate module + refactor crawl response endpoints to be consistent (#983) 2023-07-20 13:05:33 +02:00
profiles.py Storage Ops Refactor (#1257) 2023-10-10 15:04:23 -07:00
storages.py Storage ops followup type checking (#1274) 2023-10-11 14:03:00 -07:00
uploads.py webhook tweak: pass oid to crawl finished and upload finished webhooks (#1287) 2023-10-16 10:51:36 -07:00
users.py Prevent user from logging in after 5 consecutive failed login attempts until pw is reset (#1281) 2023-10-20 14:10:56 -07:00
utils.py Add slugs to org backend (#1250) 2023-10-10 18:30:09 -07:00
version.py version: update to 1.8.0-beta.0 2023-10-17 18:06:55 -07:00
webhooks.py User refactor + remove fastapi_users dependency + update fastapi (#1290) 2023-10-18 10:49:23 -07:00
zip.py Fix: Stream log downloading from WACZ (#1225) 2023-09-28 18:54:52 -07:00