sasjs/server
1
0
Fork 0
mirror of https://github.com/sasjs/server.git synced 2026-04-09 23:23:13 +00:00
Code Issues Projects Releases Wiki Activity

feat: prevent brute force attack by rate limiting login endpoint

Browse Source
This commit is contained in:
Sabir Hassan
2023-03-28 21:43:10 +05:00
parent c4066d32a0
commit a82cabb001
13 changed files with 286 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
api/.env.example
View File

@@ -24,6 +24,9 @@ LDAP_BIND_PASSWORD = <password>
LDAP_USERS_BASE_DN = <ou=users,dc=cloudron>
LDAP_GROUPS_BASE_DN = <ou=groups,dc=cloudron>
MAX_WRONG_ATTEMPTS_BY_IP_PER_DAY=[100] default value is 100
MAX_CONSECUTIVE_FAILS_BY_USERNAME_AND_IP=[10] default value is 10
RUN_TIMES=[sas,js,py | js,py | sas | sas,js] default considered as sas
SAS_PATH=/opt/sas/sas9/SASHome/SASFoundation/9.4/sas
NODE_PATH=~/.nvm/versions/node/v16.14.0/bin/node