Not sure if you guys have something in mind. But what if we had an SPI
for notifications about malicious activities? For example: We could write
an adapter to notify users via push server about a malicious attempt.
Into this way even if their e-mail account get hacked, they still get
the notification on device.
On 2014-05-19, Bill Burke wrote:
Not sure how code injection could happen with Keycloak? But,
he's
talking about Brute force.
On 5/19/2014 11:59 AM, Bruno Oliveira wrote:
> Hi Stian, I think is a good idea. But what would you consider a
> malicious login? Are you talking about something like brute forcing or
> attempts of code injection?
>
> On 2014-05-19, Stian Thorgersen wrote:
>> I'm working on adding email notifications for events. The events I think we
need to support are:
>>
>> * Suspected malicious login
>> * Password changed
>>
>> Also at the same time I'm adding theme support for emails. Folks are just
not going to want their emails to be signed 'Thanks, The Keycloak Team' ;)
>> _______________________________________________
>> keycloak-dev mailing list
>> keycloak-dev(a)lists.jboss.org
>>
https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
> --
>
> abstractj
>
> JBoss, a division of Red Hat
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
>
https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev