Currently, we have a `diffusion.allow-http-auth` configuration setting, which controls global access to repositories over HTTP.
@hach-que has a use case where an external build server does not support SSH, so it must use HTTP, but normal users should not be allowed to use HTTP for security purposes. This seems like a generally reasonable thing, and I think it's generally desirable to reduce configuration.
We should also:
- add (per-ip, to prevent DOS?) rate limiting to password failures (and SSH key failures?);
- record these events in the user action log.
We have security infrastructure which makes these things easy, now.