Bruteforce timeout via public capabilities / Show warning if login is delayed by bruteforce
Open
connectivity
enhancement
feature: authentication
hotspot: auth failure mgmt
- Dominant language
- Kotlin
- Stars
- 5.6k
- Forks
- 2k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 92
Description
As proposed here https://github.com/nextcloud/server/issues/4510#issuecomment-297694495
and implemented here https://github.com/nextcloud/server/pull/5567 we will get the possibility to ask for the current bruteforce timeout.
As we are switching to weblogin flow for >= nc12 and I enhanced the bruteforce support for all version (cookie is now sent with every request, so only first request ever will take long) I doubt if we need this.
With the timeout we could show a little warning if the login is delayed by bruteforce.
Contributor guide
Assessment
This issue has not been assessed yet.