Add comment about caching get_user_attempts output can be dangerous.

jazzband · Dec 1, 2019 · eb10ecb · eb10ecb
1 parent f05ad80
commit eb10ecb
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/axes/handlers/database.py b/axes/handlers/database.py
@@ -29,6 +29,9 @@
 class AxesDatabaseHandler(AxesHandler):  # pylint: disable=too-many-locals
     """
     Signal handler implementation that records user login attempts to database and locks users out if necessary.
+
+    .. note:: The get_user_attempts function is called several time during the authentication and lockout
+              process, caching its output can be dangerous.
     """
 
     def reset_attempts(self, *, ip_address: str = None, username: str = None) -> int: