Limit failed sign-in attempts
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 48/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Active
- Tech stack
- javascript, nodejs
- Domain
- api, authentication, security
Research direction
Start with README section 4 to find the HTTP Basic sign-in flow, then trace its API tests and .env configuration handling. Identify how the app determines the client address behind a trusted reverse proxy. Done means temporary per-account or per-address limits return 429 for repeated failures without affecting successful sign-ins, the limits are documented and configurable, and API tests cover the behavior.
Written by the indexing model from the issue text.
Description
Strata signs users in with HTTP Basic auth (README, section 4), and nothing slows down repeated failed attempts. For a tool that maps the weak spots of a network, limiting them is a minimum before calling it stable. Muster already does it.
Done when
- Repeated failed sign-ins for the same account, or from the same client address, are refused for a while with
429, and a successful sign-in is unaffected - The limits are documented (README, configuration table) and can be tuned from
.env - Behind a reverse proxy, the client address is read correctly when the proxy is trusted (and only then)
- API tests cover it
- Dominant language
- JavaScript
- Stars
- 0
- Forks
- 1
- Avg merge
- 14m
- Merged PRs (30d)
- 31
Getting set up
- Ships a Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from SolidGeeks/strata
-
documentation
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
SolidGeeks/strata#21 ·
Maintainers usually reply within 1 day
-
enhancement
Difficulty 5/5 Over a week Newbie friendliness 22/100
SolidGeeks/strata#22 ·
Maintainers usually reply within 1 day
-
help wanted
Difficulty 4/5 3-5 days Newbie friendliness 48/100
SolidGeeks/strata#20 ·
Maintainers usually reply within 1 day
All issues in SolidGeeks/strata
Similar issues
-
good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
TanbirRamim/open-source-radar#353 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 73/100
Maintainers usually reply within 2 days
-
design-review mac P3 ui
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
tosunlab/hisarapp-core#502 ·
-
enhancement status: needs triage
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
mastra-ai/mastra#28651 · 1 comment ·
Maintainers usually reply within 1 day
-
enhancement frontend help wanted
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
nikhilb2/simple_invoicing#470 ·
Maintainers usually reply within 1 day