Hopiu/django-axes
1
0
Fork 0
mirror of https://github.com/jazzband/django-axes.git synced 2026-05-10 08:35:01 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Immediately return from is_already_locked if the user is not lockable

Browse source
This commit is contained in:
Jeremy Dunck 2015-10-13 14:34:11 -07:00
parent 6dcba2bfc4
commit 57e667ac73
1 changed files with 9 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
axes/decorators.py
View file

@ -201,7 +201,7 @@ def is_user_lockable(request):
return True
if hasattr(user, 'nolockout'):
# need to revert since we need to return
# need to invert since we need to return
# false for users that can't be blocked
return not user.nolockout
@ -209,7 +209,7 @@ def is_user_lockable(request):
try:
profile = user.get_profile()
if hasattr(profile, 'nolockout'):
# need to revert since we need to return
# need to invert since we need to return
# false for users that can't be blocked
return not profile.nolockout
@ -370,10 +370,15 @@ def is_already_locked(request):
if ip_in_blacklist(ip):
return True
attempts = get_user_attempts(request)
user_lockable = is_user_lockable(request)
if not user_lockable:
return False
attempts = get_user_attempts(request)
for attempt in attempts:
if attempt.failures_since_start >= FAILURE_LIMIT and LOCK_OUT_AT_FAILURE and user_lockable:
if attempt.failures_since_start >= FAILURE_LIMIT and LOCK_OUT_AT_FAILURE:
return True
return False