John Cardinal d8be701bcd case 4726 - login lockout per login name and per address
Failed logins are counted in memory (util/LoginThrottle.cs): 10 per login
name or 50 per client address within 15 minutes, then attempts are refused
with 429 for the rest of the window without checking the password. A
correct password clears the login's count; loopback is not counted per
address. Each lockout is logged. F6 fixed (2FA part in case 4710).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-24 20:12:26 -07:00
2023-01-21 01:23:19 +00:00
2026-02-02 02:48:54 +00:00
2026-02-13 09:13:54 -08:00
2022-03-31 22:35:14 +00:00
2022-03-22 20:09:17 +00:00
2023-05-02 22:12:23 +00:00
Description
No description provided
178 MiB
Languages
C# 99.6%
JavaScript 0.2%
Batchfile 0.2%