Skip to content

[stable27] feat(security): Add a bruteforce protection backend base on memcache - #39997

Merged
nickvergessen merged 8 commits into
stable27from
backport/39870/stable27
Aug 23, 2023
Merged

[stable27] feat(security): Add a bruteforce protection backend base on memcache#39997
nickvergessen merged 8 commits into
stable27from
backport/39870/stable27

Conversation

@nickvergessen

Copy link
Copy Markdown
Member

Backport of #39870
Backport of #39996

'cronInfo' => $this->getLastCronInfo(),
'cronErrors' => $this->getCronErrors(),
'isFairUseOfFreePushService' => $this->isFairUseOfFreePushService(),
'isBruteforceThrottled' => $this->throttler->getAttempts($this->request->getRemoteAddress()) !== 0,

Check notice

Code scanning / Psalm

DeprecatedMethod

The method OCP\Security\Bruteforce\IThrottler::getAttempts has been marked as deprecated
Similar to the ratelimit backend
Signed-off-by: Joas Schilling <coding@schilljs.com>
…oesn't sleep
Signed-off-by: Joas Schilling <coding@schilljs.com>
Signed-off-by: Joas Schilling <coding@schilljs.com>
Signed-off-by: Joas Schilling <coding@schilljs.com>
Signed-off-by: Joas Schilling <coding@schilljs.com>
Signed-off-by: Joas Schilling <coding@schilljs.com>
Signed-off-by: Joas Schilling <coding@schilljs.com>
Calling setHeaders(getHeaders()) breaks the CSP nonce for unknown reasons
So shifting back to old standard practise for now
Signed-off-by: Joas Schilling <coding@schilljs.com>
@nickvergessen
nickvergessenforce-pushed the backport/39870/stable27 branch from a796887 to 26832ecCompareAugust 23, 2023 04:44
@nickvergessen
nickvergessen merged commit d12b56b into stable27Aug 23, 2023
@nickvergessen
nickvergessen deleted the backport/39870/stable27 branch August 23, 2023 06:43
@skjnldsvskjnldsv mentioned this pull request Aug 24, 2023
4 tasks
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

@nickvergessen@AndyScherzinger@skjnldsv@github-advanced-security