<div dir="ltr">JIRA created for case #2: <a href="https://issues.jboss.org/browse/KEYCLOAK-2692">https://issues.jboss.org/browse/KEYCLOAK-2692</a><br></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Mar 21, 2016 at 10:05 AM, Stian Thorgersen <span dir="ltr"><<a href="mailto:sthorger@redhat.com" target="_blank">sthorger@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">In case #1 returning 0 for non-existent user is fine in my opinion. </div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On 21 March 2016 at 09:06, Andrej Prievalsky <span dir="ltr"><<a href="mailto:ado.boj.83@gmail.com" target="_blank">ado.boj.83@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Thanks for answer for 2nd question. I will write JIRA.<div>But I didn't get answer for my 1st question.</div><div><br></div><div><br></div></div><div><div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Mar 18, 2016 at 5:22 PM, Stian Thorgersen <span dir="ltr"><<a href="mailto:sthorger@redhat.com" target="_blank">sthorger@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">numFailures should be reset after successful login</p>
<div class="gmail_quote"><div><div>On 18 Mar 2016 2:56 p.m., "Andrej Prievalsky" <<a href="mailto:ado.boj.83@gmail.com" target="_blank">ado.boj.83@gmail.com</a>> wrote:<br type="attribution"></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div dir="ltr">Hi,<div><br></div><div>I have question concerning your REST_API: </div><div><span style="color:rgba(0,0,0,0.901961);font-family:'Droid Sans Mono','DejaVu Sans Mono',monospace;font-size:16px;line-height:1.45;white-space:pre-wrap;background-color:rgb(247,247,248)">GET /admin/realms/{realm}/attack-detection/brute-force/usernames/{username}</span></div><div>In 1.9.1..Final my setting per realm Demo looks like:<span style="color:rgba(0,0,0,0.901961);font-family:'Droid Sans Mono','DejaVu Sans Mono',monospace;font-size:16px;line-height:1.45;white-space:pre-wrap;background-color:rgb(247,247,248)"><br></span></div><div><br></div><div><img src="cid:ii_15389e926878b3bb" alt="Inline image 1" width="562" height="302"><br></div><div><br></div><div>I have noticed with this endpoint:</div><div><br></div><div>- 1.) when user is not created the answer for this REST is same like for created user with 0 numFailures:</div><div> {</div><div> "numFailures": 0,</div><div> "disabled": false,</div><div> "lastIPFailure": "n/a",</div><div> "lastFailure": 0</div><div> }</div><div><br></div><div>- 2.) when Max Login Failures is set to 3 and I put 2 times incorrect password and 3rd time correct password numFailures is not reset by Keycloak:</div><div> {</div><div> "numFailures": 2,</div><div> "disabled": false,</div><div> ....</div><div> ....</div><div> }</div><div><br></div><div>Are this 2 cases correct from your point of view?</div><div><br></div><div>Thanks and Best Regards,</div><div>Andrej.</div><div><br></div><div><br></div><div><span style="color:rgba(0,0,0,0.901961);font-family:'Droid Sans Mono','DejaVu Sans Mono',monospace;font-size:16px;line-height:1.45;white-space:pre-wrap;background-color:rgb(247,247,248)"><br></span></div></div>
<br></div></div>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>