django-ratelimit-backend
django-ratelimit-backend copied to clipboard
Rate-limit your login attempts at the authentication backend level
It looks like there haven't been any commits in 20 months, and there are a few reasonable-looking PRs that haven't received any reply. @brutasse , are you still maintaining this...
We have seen increasing cases of the bug described in https://stackoverflow.com/questions/62536538/django-runserver-failing-during-admin-site-checks when running the https://github.com/edx/edx-platform development environment. This applies the recommended fix to see if that resolves our issues.
* Default is False Added since I noticed my `filterwarnings` workaround in #41 stopped working recently
Following https://django-ratelimit-backend.readthedocs.io/en/latest/usage.html#customizing-rate-limiting-criteria ``` File "/usr/local/lib/python3.7/site-packages/ratelimitbackend/backends.py", line 33, in authenticate counts = self.get_counters(request) File "/usr/local/lib/python3.7/site-packages/ratelimitbackend/backends.py", line 60, in get_counters return cache.get_many(self.keys_to_check(request)) File "/usr/local/lib/python3.7/site-packages/ratelimitbackend/backends.py", line 68, in keys_to_check ) for minute in...
the default error message contains a placeholder for the username which is not expanded when no context is provided.
What would be the accepted method to stop this from happening during mocked auth unit tests? * Wrap tests with ignore UserWarning? * Add setting to turn UserWarning on/off? Thanks
Hi: I've scanned the source once, but I'm not sure I have the answer to my question. I'd like to implement a soft lockout where after (say) 3 failed attempts,...