hcengineering / hcengineering/platform
Feat: add bruteforce protection
Open
- Dominant language
- TypeScript
- Stars
- 27.7k
- Forks
- 2.2k
- PR merge metrics
- No merged PRs in 30d
Description
### Description of the issue
The current version of Huly SelfHosted does not have any protection against password mining, as it allows an unlimited number of attempts for authorization.
### Environment
* Huly v0.6.280 SelfHosted.
### Possible solutions
This will significantly reduce the likelihood of attacks:
1. Add Google reCAPTCHA or other captcha to authorization and registration page.
2. Add two-factor authorization.
3. In addition, add limit the number of authorization requests from a single IP address.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.