Sha256: 796103f3aebc2ce19fad713383264a108e6abe48ca15746a3476bf12381b123e
Contents?: true
Size: 1.38 KB
Versions: 10
Compression:
Stored size: 1.38 KB
Contents
module Sorcery
module Controller
module Submodules
# This module helps protect user accounts by locking them down after too
# many failed attemps to login were detected.
# This is the controller part of the submodule which takes care of
# updating the failed logins and resetting them.
# See Sorcery::Model::Submodules::BruteForceProtection for configuration
# options.
module BruteForceProtection
def self.included(base)
base.send(:include, InstanceMethods)
Config.after_login << :reset_failed_logins_count!
Config.after_failed_login << :update_failed_logins_count!
end
module InstanceMethods
protected
# Increments the failed logins counter on every failed login.
# Runs as a hook after a failed login.
def update_failed_logins_count!(credentials)
user = user_class.find_by_credentials(credentials)
user.register_failed_login! if user
end
# Resets the failed logins counter.
# Runs as a hook after a successful login.
def reset_failed_logins_count!(user, credentials)
user.send(:"#{user_class.sorcery_config.failed_logins_count_attribute_name}=", 0)
user.save!(:validate => false)
end
end
end
end
end
end
Version data entries
10 entries across 10 versions & 1 rubygems