Skip to content

FINERACT-2004: Limit login retries#5443

Open
airajena wants to merge 1 commit intoapache:developfrom
airajena:FINERACT-2004/limit-login-retries
Open

FINERACT-2004: Limit login retries#5443
airajena wants to merge 1 commit intoapache:developfrom
airajena:FINERACT-2004/limit-login-retries

Conversation

@airajena
Copy link
Contributor

@airajena airajena commented Feb 4, 2026

Description

Adds a configurable global setting to limit login retries and lock accounts after exceeding the configured threshold. Failed attempts are tracked per user, and a successful login resets the counter. This aligns with FINERACT-2004 and provides safer, configurable account protection without changing public APIs.

Key changes

  • New global configuration max-login-retry-attempts (enabled flag + value).
  • Track failed_login_attempts on m_appuser and lock the user when the threshold is reached.
  • Reset failed attempts on successful authentication.
  • Added unit tests for login attempt handling and updated integration-test defaults.
  • Updated API docs with the new configuration entry.

Testing

  • ./gradlew :fineract-core:spotlessApply :fineract-core:spotbugsMain :fineract-core:spotbugsTest :fineract-core:checkstyleMain :fineract-core:checkstyleTest
  • ./gradlew :fineract-provider:spotlessApply :fineract-provider:spotbugsMain :fineract-provider:spotbugsTest :fineract-provider:checkstyleMain :fineract-provider:checkstyleTest
  • ./gradlew :integration-tests:spotlessApply :integration-tests:spotbugsMain :integration-tests:spotbugsTest :integration-tests:checkstyleMain :integration-tests:checkstyleTest

Checklist

@airajena airajena force-pushed the FINERACT-2004/limit-login-retries branch from 850d693 to 8f1c692 Compare February 4, 2026 15:06
@airajena airajena force-pushed the FINERACT-2004/limit-login-retries branch from 8f1c692 to 96a4a77 Compare February 4, 2026 17:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant