Package org.exoplatform.web.security.errorlogin

Class InvalidLoginAttemptsService

java.lang.Object

org.exoplatform.web.security.errorlogin.InvalidLoginAttemptsService

public class InvalidLoginAttemptsService
extends Object

Service can be used to track invalid login attempts of users and do some actions when some number of successive login attempts is detected.

Constructor Summary

Constructors

Constructor	Description
InvalidLoginAttemptsService(org.exoplatform.container.xml.InitParams params, org.exoplatform.services.mail.MailService mailService)

Method Summary

Modifier and Type	Method	Description
void	badLoginAttempt(String sessionId, String username, String hostname)	This should be called each time when invalid login attempt is detected (typically from HttpFilter)
void	setInvalidLoginPolicy(InvalidLoginPolicy invalidLoginPolicy)	Allows to set custom invalidLoginPolicy
void	successfulLoginAttempt(String sessionId, String username, String hostname)	This should be called each time successful login attempt is detected.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

InvalidLoginAttemptsService

public InvalidLoginAttemptsService(org.exoplatform.container.xml.InitParams params,
 org.exoplatform.services.mail.MailService mailService)

Method Details

badLoginAttempt

public void badLoginAttempt(String sessionId,
 String username,
 String hostname)

This should be called each time when invalid login attempt is detected (typically from HttpFilter)

Parameters:

sessionId -

username -

hostname -

successfulLoginAttempt

public void successfulLoginAttempt(String sessionId,
 String username,
 String hostname)

This should be called each time successful login attempt is detected. We need to use it to clean previous bad attempts when we have good attempt.

Parameters:

sessionId -

username -

hostname -

setInvalidLoginPolicy

public void setInvalidLoginPolicy(InvalidLoginPolicy invalidLoginPolicy)

Allows to set custom invalidLoginPolicy

Parameters:

invalidLoginPolicy -