Rate limiting behaviors and test coverage all look good. Clear to merge IMO.
--- ** [tickets:#8126] Rate limiting for two-factor auth** **Status:** review **Milestone:** unreleased **Labels:** security **Created:** Thu Sep 08, 2016 06:33 PM UTC by Dave Brondsema **Last Updated:** Fri Sep 09, 2016 06:09 PM UTC **Owner:** Dave Brondsema The google PAM module supports it, for reference: https://github.com/google/google-authenticator/blob/master/libpam/FILEFORMAT#L31 --- Sent from forge-allura.apache.org because dev@allura.apache.org is subscribed to https://forge-allura.apache.org/p/allura/tickets/ To unsubscribe from further messages, a project admin can change settings at https://forge-allura.apache.org/p/allura/admin/tickets/options. Or, if this is a mailing list, you can unsubscribe from the mailing list.
