In addition, something I've discovered, you should store failed login attempts for invalid usernames as well. If you only ever lockout failed attempts on valid usernames, then you are revealing which usernames are valid which is a no-no.
-
Notifications
You must be signed in to change notification settings - Fork 0
thevinitgupta/lynkit-backend
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
REST API server for URL Shortner Application - Lynkit
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published