org.exoplatform.web.security.errorlogin

Class InvalidLoginAttemptsService

java.lang.Object

org.exoplatform.web.security.errorlogin.InvalidLoginAttemptsService

public class InvalidLoginAttemptsService
extends Object

Service can be used to track invalid login attempts of users and do some actions when some number of successive login attempts is detected.

Version:

$Revision$

Author:

Marek Posolda

Constructor Summary

Constructors

Constructor and Description
InvalidLoginAttemptsService(org.exoplatform.container.xml.InitParams params, org.exoplatform.services.mail.MailService mailService)

Method Summary

Methods

Modifier and Type	Method and Description
void	badLoginAttempt(String sessionId, String username, String hostname) This should be called each time when invalid login attempt is detected (typically from HttpFilter)
void	setInvalidLoginPolicy(InvalidLoginPolicy invalidLoginPolicy) Allows to set custom invalidLoginPolicy
void	successfulLoginAttempt(String sessionId, String username, String hostname) This should be called each time successful login attempt is detected.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

InvalidLoginAttemptsService

public InvalidLoginAttemptsService(org.exoplatform.container.xml.InitParams params,
                           org.exoplatform.services.mail.MailService mailService)

Method Detail

badLoginAttempt

public void badLoginAttempt(String sessionId,
                   String username,
                   String hostname)

This should be called each time when invalid login attempt is detected (typically from HttpFilter)

Parameters:

sessionId -

username -

hostname -

successfulLoginAttempt

public void successfulLoginAttempt(String sessionId,
                          String username,
                          String hostname)

This should be called each time successful login attempt is detected. We need to use it to clean previous bad attempts when we have good attempt.

Parameters:

sessionId -

username -

hostname -

setInvalidLoginPolicy

public void setInvalidLoginPolicy(InvalidLoginPolicy invalidLoginPolicy)

Allows to set custom invalidLoginPolicy

Parameters:

invalidLoginPolicy -