Max verification attemptswith wrong credentials
Does passlib have a framework for handling false verification attempts (password, token, etc.)? I read the docs but couldn't find any mention of this. What I mean (at this topic I'm saying about wrong credentials exactly): I see the following working concept: passlib keeps the number of false attempts in memory for some time (say 5 minutes). If the number of false attempts is exceeded during this time - passlib always returns false, even if the credentials are correct. What is it for?
- Prevent brute force attacks
- Delegate authentication / authorization / verification logic to the library.
What currently solution I'm using for now: I'm storing false verification attempts inside a JWT token
Edited by David