Hopiu/django-axes
1
0
Fork 0
mirror of https://github.com/jazzband/django-axes.git synced 2026-03-16 22:30:23 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

add nifty cooloff feature.

Browse source 
Allows user to define an amount of time after which old failed attempts
will be forgotten.
This commit is contained in:
Mike Blume 2010-09-14 21:28:42 +00:00
parent 9b72adfee9
commit 49de80206d
1 changed files with 22 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
axes/decorators.py
View file

@ -24,6 +24,13 @@ if hasattr(settings, 'AXES_USE_USER_AGENT'):
else:
USE_USER_AGENT = False
if hasattr(settings, 'AXES_COOLOFF_TIME'):
COOLOFF_TIME = settings.AXES_COOLOFF_TIME
if isinstance(COOLOFF_TIME, int):
COOLOFF_TIME = datetime.timedelta(hours=COOLOFF_TIME)
else:
COOLOFF_TIME = None
def query2str(items):
return '\n'.join(['%s=%s' % (k, v) for k,v in items])
@ -47,8 +54,14 @@ def get_user_attempt(request):
attempts = AccessAttempt.objects.filter(
ip_address=ip
)
if attempts:
return attempts[0]
if not attempts:
return None
attempt = attempts[0]
if COOLOFF_TIME:
if attempt.attempt_time + COOLOFF_TIME < datetime.datetime.now():
attempt.delete()
return None
return attempt
def watch_login(func):
"""
@ -131,8 +144,13 @@ def watch_login(func):
# if they're past the number of attempts allowed
if failures > FAILURE_LIMIT:
if LOCK_OUT_AT_FAILURE:
response = HttpResponse("Account locked: too many login attempts. "
"Contact an admin to unlock your account."
if COOLOFF_TIME:
response = HttpResponse("Account locked: too many login attempts. "
"Please try again later."
)
else:
response = HttpResponse("Account locked: too many login attempts. "
"Contact an admin to unlock your account."
)
# We log them out in case they actually managed to enter
# the correct password.