I went to acegi forum about this issue and found it seems we have to create a
field in db to store attempted tries of failing login - mainly since at that
point we don't have any session yet.
I am wondering if there is another way to keep record of failing login.
Sample code which I have done is as below,
public class ApplicationSecurityListener implements ApplicationListener {
public void onApplicationEvent(ApplicationEvent event) {
if (event instanceof AuthorizationFailureEvent) {
AuthorizationFailureEvent authorizationFailureEvent =
(AuthorizationFailureEvent) event;
//need a way to record counts of login here - don't want store
it in db
Any idea?
--
View this message in context:
http://www.nabble.com/locking-account-afer-several-tries-of-login-tf2735347s2369.html#a7630999
Sent from the AppFuse - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
