Skip to content

[13] Expired tokens should not trigger bruteforce protection - #12212

Merged
MorrisJobke merged 2 commits into
stable13from
backport/12140/stable13
Nov 2, 2018
Merged

[13] Expired tokens should not trigger bruteforce protection #12212
MorrisJobke merged 2 commits into
stable13from
backport/12140/stable13

Conversation

@rullzer

Copy link
Copy Markdown
Member

Backport of #12140

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
Fixes#12131
If we hit an expired token there is no need to continue checking. Since
we know it is a token.
We also should not register this with the bruteforce throttler as it is
actually a valid token. Just expired. Instead the authentication should
fail. And buisness continues as usual.
Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
@rullzer

Copy link
Copy Markdown
MemberAuthor

Lets see what CI tells us

@MorrisJobkeMorrisJobke added this to the Nextcloud 13.0.8 milestone Nov 2, 2018
@MorrisJobke

Copy link
Copy Markdown
Member

Lets see what CI tells us

💚

@MorrisJobkeMorrisJobke left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code change is fine with me 👍

@rullzer

Copy link
Copy Markdown
MemberAuthor

Nice then lets do it!

@DagefoerdeDagefoerde left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

@MorrisJobke
MorrisJobke merged commit afed9ae into stable13Nov 2, 2018
@MorrisJobke
MorrisJobke deleted the backport/12140/stable13 branch November 2, 2018 11:33
@MorrisJobkeMorrisJobke mentioned this pull request Nov 13, 2018
@MorrisJobkeMorrisJobke mentioned this pull request Nov 22, 2018
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to reviewWaiting for reviewsenhancement

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@rullzer@MorrisJobke@Dagefoerde