Files
raven/server/AyaNova/util
John Cardinal d8be701bcd case 4726 - login lockout per login name and per address
Failed logins are counted in memory (util/LoginThrottle.cs): 10 per login
name or 50 per client address within 15 minutes, then attempts are refused
with 429 for the rest of the window without checking the password. A
correct password clears the login's count; loopback is not counted per
address. Each lockout is logged. F6 fixed (2FA part in case 4710).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-24 20:12:26 -07:00
..
2025-11-24 14:19:27 +00:00
2018-09-05 18:57:55 +00:00
2021-09-10 20:34:51 +00:00
2018-06-28 23:41:48 +00:00
2018-06-28 23:41:48 +00:00
2021-10-21 19:04:14 +00:00
2018-06-28 23:41:48 +00:00
2022-03-25 19:48:34 +00:00
2021-12-29 19:35:41 +00:00
2021-12-23 17:16:01 +00:00
2022-12-13 23:09:34 +00:00
2021-09-06 23:09:12 +00:00
2023-04-25 00:03:57 +00:00
2020-07-22 15:30:56 +00:00
2021-09-15 15:18:33 +00:00
2021-12-29 19:35:41 +00:00