Implement User Lockout After Failed Login Attempts
- Dominant language
- Python
- Stars
- 30
- Forks
- 22
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 22
Description
# 💡 Summary #
Our application needs to enhance security by implementing a user lockout mechanism. After three consecutive failed login attempts, the user account should be temporarily locked to prevent brute force attacks.
## Motivation and context ##
This is a security requirement.
## Implementation notes ##
Please provide details for implementation, such as:
- Create a failed login attempt counter
- Apply a threshold of 3 attempts
- Apply unlock mechanism based on time - 10 mins
- Create a warning when a lockout will happen on 3 attempts, when a failed attempt occurs
- Create a User notification when the account becomes locked
## Acceptance criteria ##
- [ ] Commit to Integration Branch
- [ ] Demonstrate functionality
- [ ] Include Screenshots Of Updated Views
- [ ] Commit to Staging
- [ ] Create Functional Tests
Contributor guide
Assessment
This issue has not been assessed yet.