Xavier Morel a8d868e287 [ADD] Rate limiting to (failed) login attempts ...

Task 31122 section 4.

Implement per-IP rate limiting of login attempts after some number
of failures.

* check_credentials has no reason to be public, make it private
* add hooks to check for login cooldown on a source IP (remote_addr:
  http://werkzeug.pocoo.org/docs/0.14/wrappers/#werkzeug.wrappers.BaseRequest.remote_addr)
  basis
* add baseline/default configuration of 60s cooldown
* add baseline threshold of 10 login failures, after checking odoo.com
  logs it looks like we have short runs of up to 7 failures (assumed
  to be legitimate) before the user either gets it right or goes and
  looks it up

Depends on #24187

2018-07-26 15:53:26 +02:00

..

__init__.py

…

main.py

[ADD] Rate limiting to (failed) login attempts

2018-07-26 15:53:26 +02:00

pivot.py

[FIX] the ; in content-disposition is a separator not a terminator

2018-07-13 17:31:22 +02:00