AI/dify
1
0
Fork 0
mirror of https://git.mirrors.martin98.com/https://github.com/langgenius/dify.git synced 2025-08-18 18:25:54 +08:00
Code Issues Packages Projects Releases Wiki Activity

make login lockout duration configurable (#11699)

Browse Source
This commit is contained in:
Kazuhisa Wada 2024-12-16 20:05:27 +09:00 committed by GitHub
parent fc8fdbacb4
commit e20161b3de
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
api/.env.example
View File

@ -435,3 +435,5 @@ CREATE_TIDB_SERVICE_JOB_ENABLED=false
# Maximum number of submitted thread count in a ThreadPool for parallel node execution # Maximum number of submitted thread count in a ThreadPool for parallel node execution
MAX_SUBMIT_COUNT=100 MAX_SUBMIT_COUNT=100
# Lockout duration in seconds
LOGIN_LOCKOUT_DURATION=86400

5
api/configs/feature/__init__.py
View File

@ -485,6 +485,11 @@ class AuthConfig(BaseSettings):
default=60, default=60,
) )
LOGIN_LOCKOUT_DURATION: PositiveInt = Field(
description="Time (in seconds) a user must wait before retrying login after exceeding the rate limit.",
default=86400,
)
class ModerationConfig(BaseSettings): class ModerationConfig(BaseSettings):
""" """

2
api/services/account_service.py
View File

@ -420,7 +420,7 @@ class AccountService:
if count is None: if count is None:
count = 0 count = 0
count = int(count) + 1 count = int(count) + 1
redis_client.setex(key, 60 * 60 * 24, count) redis_client.setex(key, dify_config.LOGIN_LOCKOUT_DURATION, count)
@staticmethod @staticmethod
def is_login_error_rate_limit(email: str) -> bool: def is_login_error_rate_limit(email: str) -> bool: