-
Feature
-
Resolution: Won't Do
-
Major
-
None
-
None
-
False
-
-
False
Description
This is a feature request
The software does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.
Login forms:
- https://<address>/#/login
- https://<address>/api/login
Steps to Reproduce
Attempt to login multiple times
Actual Behavior
Does not prevent multiple failed authentication attempts or api requests in a short period of time.
Expected Behavior
Once a certain number of failed login attempts occur.