Skip to content

Preventing Brute Force Authentication Attempts

Anantha Raju C edited this page Sep 29, 2020 · 1 revision

A basic solution for preventing brute force authentication attempts using Spring Security is implemented. The app keeps a record of the number of failed attempts originating from a single IP address. If that particular IP goes over a set number of requests – it will be blocked for a set amount of time.

Refer io.github.anantharajuc.sbtest.security.authentication.LoginAttemptService

Clone this wiki locally