Project

General

Profile

Feature #19

following logout requests should not be counted as failed login

Added by The 2nd almost 6 years ago. Updated almost 6 years ago.

Status:
Erledigt
Priority:
Normal
Assignee:
Target version:
Start date:
18 January 2015
Due date:
% Done:

0%


Description

logout requests should not count up failcount!
but we cannot detect them for requests if there exists no session (because logout was already done) from which we can get the pass_hash from.
adding a list of already used logout passwords can fix this. but they should expire after some time. (after an unused time of the lo
gout password)

History

#1 Updated by The 2nd almost 6 years ago

  • Status changed from Neu to Erledigt

Also available in: Atom PDF