Page MenuHomePhabricator

Rate limit multi-factor actions
ClosedPublic

Authored by epriestley on Apr 30 2014, 4:21 PM.
Tags
None
Referenced Files
F15507191: D8911.id.diff
Tue, Apr 15, 5:14 PM
F15506021: D8911.id21146.diff
Tue, Apr 15, 7:54 AM
F15505593: D8911.id21167.diff
Tue, Apr 15, 4:18 AM
F15503691: D8911.diff
Mon, Apr 14, 12:08 PM
F15498681: D8911.id21167.diff
Sun, Apr 13, 1:51 PM
F15491050: D8911.diff
Fri, Apr 11, 10:55 PM
F15475480: D8911.diff
Sun, Apr 6, 7:56 PM
F15417643: D8911.id21146.diff
Mar 20 2025, 5:45 PM
Subscribers

Details

Reviewers
btrahan
Maniphest Tasks
T4398: Implement two-factor authentication
Commits
Restricted Diffusion Commit
rP23e654ec2bc8: Rate limit multi-factor actions
Summary

Ref T4398. Prevent users from brute forcing multi-factor auth by rate limiting attempts. This slightly refines the rate limiting to allow callers to check for a rate limit without adding points, and gives users credit for successfully completing an auth workflow.

Test Plan

Tried to enter hisec with bad credentials 11 times in a row, got rate limited.

Diff Detail

Repository
rP Phabricator
Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

epriestley retitled this revision from to Rate limit multi-factor actions.
epriestley updated this object.
epriestley edited the test plan for this revision. (Show Details)
epriestley added a reviewer: btrahan.
btrahan edited edge metadata.
This revision is now accepted and ready to land.Apr 30 2014, 6:32 PM
epriestley updated this revision to Diff 21167.

Closed by commit rP23e654ec2bc8 (authored by @epriestley).