Casdoor doesn't block users based on multiple invalid login attempts by IP

dang0713 · Sep 2024

Hi. We did a pentest and failed because cassdoor doesn't block users based on multiple invalid login attempts, based on ip.

Anyone know something about this?

dang0713 · Sep 2024

Can anyone help me. It's a bit urgent

liohau · Sep 2024

(I would be interested by the answer :))

hsluoyz · Sep 2024

create a github issue with details

Topic	Replies	Views	Activity
WebAuthn + TOTP MFA returns invalid_grant "NextMfa" error in OIDC apps Casdoor webauthn mfa oidc	5	57	19h
Does Casdoor support running as a Windows background service? Casdoor	1	50	4d
Where should users change their password or email address? Casdoor	1	46	Oct 8
Demo site unavailable and Google OAuth redirect_uri_mismatch error Casdoor bug oauth sso	3	40	Sep 28
How to set up grok on casbin-gateway? Casdoor	1	39	Sep 27