mirror of https://github.com/grafana/grafana.git
3d1c624c12
* db: add login attempt migrations * db: add possibility to create login attempts * db: add possibility to retrieve login attempt count per username * auth: validation and update of login attempts for invalid credentials If login attempt count for user authenticating is 5 or more the last 5 minutes we temporarily block the user access to login * db: add possibility to delete expired login attempts * cleanup: Delete login attempts older than 10 minutes The cleanup job are running continuously and triggering each 10 minute * fix typo: rename consequent to consequent * auth: enable login attempt validation for ldap logins * auth: disable login attempts validation by configuration Setting is named DisableLoginAttemptsValidation and is false by default Config disable_login_attempts_validation is placed under security section #7616 * auth: don't run cleanup of login attempts if feature is disabled #7616 * auth: rename settings.go to ldap_settings.go * auth: refactor AuthenticateUser Extract grafana login, ldap login and login attemp validation together with their tests to separate files. Enables testing of many more aspects when authenticating a user. #7616 * auth: rename login attempt validation to brute force login protection Setting DisableLoginAttemptsValidation => DisableBruteForceLoginProtection Configuration disable_login_attempts_validation => disable_brute_force_login_protection #7616 |
||
|---|---|---|
| .. | ||
| migrations | ||
| migrator | ||
| sqlutil | ||
| alert.go | ||
| alert_notification.go | ||
| alert_notification_test.go | ||
| alert_test.go | ||
| annotation.go | ||
| annotation_test.go | ||
| apikey.go | ||
| apikey_test.go | ||
| dashboard.go | ||
| dashboard_acl.go | ||
| dashboard_acl_test.go | ||
| dashboard_snapshot.go | ||
| dashboard_snapshot_test.go | ||
| dashboard_test.go | ||
| dashboard_version.go | ||
| dashboard_version_test.go | ||
| datasource.go | ||
| datasource_test.go | ||
| health.go | ||
| logger.go | ||
| login_attempt.go | ||
| login_attempt_test.go | ||
| org.go | ||
| org_test.go | ||
| org_users.go | ||
| playlist.go | ||
| playlist_test.go | ||
| plugin_setting.go | ||
| preferences.go | ||
| quota.go | ||
| quota_test.go | ||
| search_builder.go | ||
| search_builder_test.go | ||
| shared.go | ||
| sql_test_data.go | ||
| sqlstore.go | ||
| sqlstore.goconvey | ||
| star.go | ||
| stars_test.go | ||
| stats.go | ||
| tables.go | ||
| team.go | ||
| team_test.go | ||
| temp_user.go | ||
| temp_user_test.go | ||
| tls_mysql.go | ||
| user.go | ||
| user_test.go | ||