Marcus Efraimsson 3d1c624c12 WIP: Protect against brute force (frequent) login attempts (#10031) ... * db: add login attempt migrations * db: add possibility to create login attempts * db: add possibility to retrieve login attempt count per username * auth: validation and update of login attempts for invalid credentials If login attempt count for user authenticating is 5 or more the last 5 minutes we temporarily block the user access to login * db: add possibility to delete expired login attempts * cleanup: Delete login attempts older than 10 minutes The cleanup job are running continuously and triggering each 10 minute * fix typo: rename consequent to consequent * auth: enable login attempt validation for ldap logins * auth: disable login attempts validation by configuration Setting is named DisableLoginAttemptsValidation and is false by default Config disable_login_attempts_validation is placed under security section #7616 * auth: don't run cleanup of login attempts if feature is disabled #7616 * auth: rename settings.go to ldap_settings.go * auth: refactor AuthenticateUser Extract grafana login, ldap login and login attemp validation together with their tests to separate files. Enables testing of many more aspects when authenticating a user. #7616 * auth: rename login attempt validation to brute force login protection Setting DisableLoginAttemptsValidation => DisableBruteForceLoginProtection Configuration disable_login_attempts_validation => disable_brute_force_login_protection #7616		2018-01-26 10:41:41 +01:00
..
address.go	feat(organization): added update org address to http api and to org details settings view, closes #2672	2015-09-08 14:22:44 +02:00
alert_notifications.go	tech(notifications): splitt into 3 queries	2016-09-06 08:43:15 +02:00
alert_test.go	feat(alerting): add alert message to slack integration	2016-08-12 10:12:04 +02:00
alert.go	alerting: dedupe alert notifications when running multiple servers	2017-02-21 16:54:49 +01:00
apikey.go	HTTP API: grafana /render calls nows with api keys, Fixes #1649	2015-04-08 08:59:12 +02:00
dashboard_acl_test.go	WIP: Permission Type as string in permission query	2017-06-12 15:49:09 +02:00
dashboard_acl.go	refactor: format files by gofmt	2017-12-11 19:46:05 +03:00
dashboard_snapshot.go	snapshots: improve snapshot listing performance, #9314 (#9477)	2017-10-10 14:25:19 +02:00
dashboard_version.go	dashboard history: clean up dashboard version history	2017-11-14 18:22:18 +03:00
dashboards_test.go	dashboards as cfg: create dashboard folders if missing	2017-12-28 13:33:11 +01:00
dashboards.go	dashboards as cfg: create dashboard folders if missing	2017-12-28 13:33:11 +01:00
datasource_cache_test.go	Retain old name for TLS client auth	2017-10-11 08:18:04 +01:00
datasource_cache.go	Retain old name for TLS client auth	2017-10-11 08:18:04 +01:00
datasource.go	datasource as cfg: support globbing	2017-11-15 14:30:32 +01:00
health.go	feat: added api health endpoint that does not require auth and never creates sessions, returns db status as well. #3302	2017-04-25 17:17:45 +02:00
helpflags.go	ux(getting started): progress on getting started panel and persited help flag states, #6466	2016-11-09 10:41:39 +01:00
home_dashboard.go	Worked on home dashboard	2015-02-03 15:04:35 +01:00
login_attempt.go	WIP: Protect against brute force (frequent) login attempts (#10031)	2018-01-26 10:41:41 +01:00
models.go	grafana_com: changed name of oauth grafana_net integration (old settings names still work), and updated login button look, closes #8415	2017-05-22 14:56:50 +02:00
notifications.go	fix: better error handling / messsage when testing email notification when stmp is not configured, fixes #8093	2017-04-25 13:16:41 +02:00
org_user.go	Merge remote-tracking branch 'origin/master' into develop	2017-12-13 19:18:10 +01:00
org.go	feat(organization): added update org address to http api and to org details settings view, closes #2672	2015-09-08 14:22:44 +02:00
playlist.go	fix(playlist): fixed sorting issue with playlist playback, fixes #5467	2016-09-22 10:06:03 +02:00
plugin_settings.go	refactor(securejsondata): extract to class	2016-11-24 13:22:25 +01:00
preferences.go	feat(preferences): theme and home dashbord settings now work work on profile and org settings page	2016-04-02 13:54:06 -07:00
quotas.go	move toMap function to be a method on the quota structs	2015-09-15 17:18:26 +08:00
search.go	Major refactorings around searching, moved to seperate package, trying to move stuff out of models package, extend search support searching different types of entities and different types of dashboards, #960	2015-05-13 13:36:24 +02:00
star.go	Added isStarred to search result hit, very inefficient loading right now but can be cached later on	2015-02-05 09:49:00 +01:00
stats.go	stats: send amount of stars as stats	2018-01-23 22:51:05 +01:00
streams.go	mergefix(): fixed issue with master merge	2017-01-31 09:00:36 +01:00
tags_test.go	Create annotations (#8197)	2017-10-07 10:31:39 +02:00
tags.go	Create annotations (#8197)	2017-10-07 10:31:39 +02:00
team_member.go	Add avatar to team and team members page (#10305)	2017-12-20 21:20:12 +01:00
team.go	Add avatar to team and team members page (#10305)	2017-12-20 21:20:12 +01:00
temp_user.go	signup: fix email sent logic for tempuser	2017-06-30 20:21:08 +02:00
test_data.go	mysql: minor progress on response processing	2017-03-31 11:45:25 +02:00
user.go	fix: viewers can edit now works correctly	2017-12-15 14:19:49 +01:00