goauthentik / goauthentik/authentik

Password Stage Failed Attempts Before Cancel Only Works once

Open
#21,600 0 comments 0 reactions 0 assignees View on GitHub
bug/confirmed
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 1h
Merged PRs (30d)
644

Description

### Describe the bug

In my auth flow, I have "Failed attempts before cancel" set to 5 in my Password Stage. If I then fail the password 5 times, the flow successfully ends as expected.

However, if I go back to the login page, and try again with either the same or a different user, I can now try the password stage more than 5 times (seems to be indefinite).

Running Authentik 2026.2.1 with Docker.

### How to reproduce

Try logging in 5 times using bad password.
After Flow fails, click "GO Back" or "Not You"
Try again - can attempt password more than 5 times.

### Expected behavior

Flow always ends after 5 password failures during stage.

### Screenshots

_No response_

### Additional context

_No response_

### Deployment Method

Docker

### Version

2026.2.1

### Relevant log output

```shell

```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.