v2.6.0: Adds protection against brute-force login attempts

thorewi released this 27 Mar 09:28

· 17 commits to main since this release

a9dd2c3

Introduces a mechanism to track failed login attempts by IP address and block authentication when a configurable limit is reached within a specified timeframe. This includes a new LoginAttempt entity and a TooManyLoginAttemptsException.

Assets 2