]> source.dussan.org Git - nextcloud-server.git/commit
Reset bruteforce on token refresh OAuth
authorRoeland Jago Douma <roeland@famdouma.nl>
Mon, 29 Oct 2018 21:12:18 +0000 (22:12 +0100)
committerJan Dageförde <jan.dagefoerde@ercis.uni-muenster.de>
Wed, 31 Oct 2018 09:54:17 +0000 (10:54 +0100)
commit71d2d3ca00f62fc44d49ced5aa8ea5c0b350fc58
treed22dc9785e088094fd9bc0776507aa7e258ae450
parent4b9998533c574c405d257d358e707c6f814a78d5
Reset bruteforce on token refresh OAuth

When using atoken obtained via OAuth the token expires. Resulting in
brute force attempts hitting the requesting IP.

This resets the brute force attempts for that UID on a valid refresh of
the token.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
apps/oauth2/lib/Controller/OauthApiController.php
apps/oauth2/tests/Controller/OauthApiControllerTest.php
lib/private/Server.php