Skip to content

Provide 'too many failed authentication attempts' security alert #253

@stijnmoreels

Description

@stijnmoreels

Is your feature request related to a problem? Please describe.
We already write a security event upon successful van failed authentication, but we do nothing we possible malicious activity that could be detected with too many failed authentication attempts.

Describe the solution you'd like
We should consider adding a configurable threshold that will track a security alert when too many failed authentications are being monitored.

Describe alternatives you've considered
This could also reflect in the HTTP response, but maybe in a later phase.

Metadata

Metadata

Assignees

No one assigned

    Labels

    area:securityAll issues related to securityenhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions