Add bruteforce protection

2015-08-01 12:14:22 -04:00
parent db69d5c429
commit db88a00d48
20 changed files with 405 additions and 43 deletions
--- a/app/Api/Auth.php
+++ b/app/Api/Auth.php
@@ -26,7 +26,7 @@ class Auth extends Base
    {
        $this->container['dispatcher']->dispatch('api.bootstrap', new Event);

-        if ($username !== 'jsonrpc' && $this->authentication->authenticate($username, $password)) {
+        if ($username !== 'jsonrpc' && ! $this->authentication->hasCaptcha($username) && $this->authentication->authenticate($username, $password)) {
            $this->checkProcedurePermission(true, $method);
            $this->userSession->refresh($this->user->getByUsername($username));
        }