Details
-
Type:
New Feature
-
Status:
Open
-
Priority:
Minor
-
Resolution: Unresolved
-
Affects Version/s: 1.8.2
-
Fix Version/s: None
-
Component/s: Security
-
Labels:None
Description
Implement full support for Acegi's "account locked" exception condition. Lock out user accounts after a configurable number of failed login attempts. (Parameter value of 0 disables this feature.)
Requires implementation of custom version of Acegi's DaoAuthenticationProvider.
I have this code completed & tested under Struts. I will upload a patch once I test on SpringMVC also.