From be8d45436d8edb82fa1235b9e5ec4fb28f2b9564 Mon Sep 17 00:00:00 2001
From: Daniel Gerhardt <code@dgerhardt.net>
Date: Mon, 10 Aug 2015 13:35:35 +0200
Subject: [PATCH] Fix 'security.authentication.login-try-limit' config
parameter
The config parameter is now used instead of the hard-coded value '5'.
---
src/main/java/de/thm/arsnova/services/UserService.java | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/main/java/de/thm/arsnova/services/UserService.java b/src/main/java/de/thm/arsnova/services/UserService.java
index bf0777c9..7fba2f8a 100644
--- a/src/main/java/de/thm/arsnova/services/UserService.java
+++ b/src/main/java/de/thm/arsnova/services/UserService.java
@@ -222,9 +222,9 @@ public class UserService implements IUserService {
if (null == tries) {
tries = 0;
}
- if (tries < 5) {
+ if (tries < loginTryLimit) {
loginTries.put(addr, ++tries);
- if (5 == tries) {
+ if (loginTryLimit == tries) {
LOGGER.info("Temporarily banned {} from login.", new Object[] {addr});
loginBans.add(addr);
}
--
GitLab