cisagov / cisagov/XFD

Implement User Lockout After Failed Login Attempts

Open
#18 0 comments 0 reactions 1 assignee Claimed by @cduhn17 View on GitHub
improvement
Dominant language
Python
Stars
30
Forks
22
Avg merge
1d 21h
Merged PRs (30d)
22

Description

# 💡 Summary #

Our application needs to enhance security by implementing a user lockout mechanism. After three consecutive failed login attempts, the user account should be temporarily locked to prevent brute force attacks.

## Motivation and context ##

This is a security requirement.

## Implementation notes ##

Please provide details for implementation, such as:

- Create a failed login attempt counter
- Apply a threshold of 3 attempts
- Apply unlock mechanism based on time - 10 mins
- Create a warning when a lockout will happen on 3 attempts, when a failed attempt occurs
- Create a User notification when the account becomes locked

## Acceptance criteria ##

- [ ] Commit to Integration Branch
- [ ] Demonstrate functionality
- [ ] Include Screenshots Of Updated Views
- [ ] Commit to Staging
- [ ] Create Functional Tests

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.