[keycloak-user] Brute Force Detection - Get status of a username in brute force detection

[Stian Thorgersen]

In case #1 returning 0 for non-existent user is fine in my opinion.

On 21 March 2016 at 09:06, Andrej Prievalsky <ado.boj.83 at gmail.com> wrote:

> Thanks for answer for 2nd question. I will write JIRA.
> But I didn't get answer for my 1st question.
>
>
>
> On Fri, Mar 18, 2016 at 5:22 PM, Stian Thorgersen <sthorger at redhat.com>
> wrote:
>
>> numFailures should be reset after successful login
>> On 18 Mar 2016 2:56 p.m., "Andrej Prievalsky" <ado.boj.83 at gmail.com>
>> wrote:
>>
>>> Hi,
>>>
>>> I have question concerning your REST_API:
>>> GET
>>> /admin/realms/{realm}/attack-detection/brute-force/usernames/{username}
>>> In 1.9.1..Final my setting per realm Demo looks like:
>>>
>>> [image: Inline image 1]
>>>
>>> I have noticed with this endpoint:
>>>
>>> - 1.) when user is not created the answer for this REST is same like for
>>> created user with 0 numFailures:
>>>    {
>>>    "numFailures": 0,
>>>    "disabled": false,
>>>    "lastIPFailure": "n/a",
>>>    "lastFailure": 0
>>>    }
>>>
>>> - 2.) when Max Login Failures is set to 3 and I put 2 times incorrect
>>> password and 3rd time correct password numFailures is not reset by Keycloak:
>>>   {
>>>   "numFailures": 2,
>>>   "disabled": false,
>>>     ....
>>>     ....
>>>    }
>>>
>>> Are this 2 cases correct from your point of view?
>>>
>>> Thanks and Best Regards,
>>> Andrej.
>>>
>>>
>>>
>>>
>>> _______________________________________________
>>> keycloak-user mailing list
>>> keycloak-user at lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160321/785a48bf/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 46216 bytes
Desc: not available
Url : http://lists.jboss.org/pipermail/keycloak-user/attachments/20160321/785a48bf/attachment-0001.png