hcengineering / hcengineering/platform

Feat: add bruteforce protection

Open
#6,570 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
27.7k
Forks
2.2k
PR merge metrics
No merged PRs in 30d

Description

### Description of the issue
The current version of Huly SelfHosted does not have any protection against password mining, as it allows an unlimited number of attempts for authorization.

### Environment
* Huly v0.6.280 SelfHosted.

### Possible solutions
This will significantly reduce the likelihood of attacks:
1. Add Google reCAPTCHA or other captcha to authorization and registration page.
2. Add two-factor authorization.
3. In addition, add limit the number of authorization requests from a single IP address.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.