📢 Moderators Needed 🚀

Moderators are needed with resources to post or have access to resources to post. Submit an application to be considered.
K

RSS Failed Passkey logins do not trigger login limit

K

Kirby

Guest
Guest or Bot
If a client has more than 4 failed login attempts with username / email and password within 15 minutes the user account will be limited according to option loginLimit:

1764688170949.webp

This option is not applied though if Passkey logins are performed.

While Passkeys are a lot less vulnerable for brute force attacks, it might still be useful to apply a limit.

Suggested Fix
Also apply the configured limit method for Passkey logins (Preferred)
or
Modify the...

Read more

Continue reading...
 
G
RSS  Adverising and affiliate links
K
RSS  xf-dev:generate-finders fails if directory Finder does not exist yet
You must log in or register to reply here.
Similar content Most view View more
Back
Top