Add bruteforce protection

2015-08-01 12:14:22 -04:00
parent db69d5c429
commit db88a00d48
20 changed files with 405 additions and 43 deletions
--- a/docs/api-json-rpc.markdown
+++ b/docs/api-json-rpc.markdown
@@ -27,6 +27,7 @@ Security

 - Always use HTTPS with a valid certificate
 - If you make a mobile application, it's your job to store securely the user credentials on the device
+- After 3 authentication failure on the user api, the end-user have to unlock his account by using the login form
 - Two factor authentication is not yet available through the API

 Protocol