Add login rate limiter

AchillesKal · Apr 29, 2024 · afcad5e · afcad5e
1 parent 1c3732f
commit afcad5e
Show file tree

Hide file tree

Showing 3 changed files with 76 additions and 1 deletion.
diff --git a/composer.json b/composer.json
@@ -42,6 +42,7 @@
         "symfony/monolog-bundle": "^3.0",
         "symfony/property-access": "7.0.*",
         "symfony/property-info": "7.0.*",
+        "symfony/rate-limiter": "7.0.*",
         "symfony/runtime": "7.0.*",
         "symfony/security-bundle": "7.0.*",
         "symfony/security-csrf": "7.0.*",

diff --git a/composer.lock b/composer.lock
diff --git a/config/packages/security.yaml b/config/packages/security.yaml
@@ -27,6 +27,10 @@ security:
             remember_me:
                 secret: '%kernel.secret%' # required
                 lifetime: 604800 # 1 week in seconds
+
+            login_throttling:
+                max_attempts: 5
+                interval: '10 minutes'
 
             # activate different ways to authenticate
             # https://symfony.com/doc/current/security.html#the-firewall