summaryrefslogtreecommitdiff
path: root/config
diff options
context:
space:
mode:
authorGitLab Release Tools Bot <robert+release-tools@gitlab.com>2019-08-29 21:34:12 +0000
committerGitLab Release Tools Bot <robert+release-tools@gitlab.com>2019-08-29 21:34:12 +0000
commita5b2a3786056ddf99de06c8315e9a42c3bf86cd5 (patch)
treeb2e02a060e3df9a078706230ee7a6064ac4bbd85 /config
parente20fb7cb395e9c6594a098eddd816079259f64d9 (diff)
parentdfcf4cf5f1e87a29f0d9fcc5ff2bba47258893bb (diff)
downloadgitlab-ce-a5b2a3786056ddf99de06c8315e9a42c3bf86cd5.tar.gz
Merge branch 'security-59549-add-capcha-for-failed-logins' into 'master'
Require a captcha after unique failed logins from the same IP See merge request gitlab/gitlabhq!3270
Diffstat (limited to 'config')
-rw-r--r--config/initializers/warden.rb1
1 files changed, 1 insertions, 0 deletions
diff --git a/config/initializers/warden.rb b/config/initializers/warden.rb
index 1d2bb2bce0a..d8a4da8cdf9 100644
--- a/config/initializers/warden.rb
+++ b/config/initializers/warden.rb
@@ -19,6 +19,7 @@ Rails.application.configure do |config|
Warden::Manager.after_authentication(scope: :user) do |user, auth, opts|
ActiveSession.cleanup(user)
+ Gitlab::AnonymousSession.new(auth.request.remote_ip, session_id: auth.request.session.id).cleanup_session_per_ip_entries
end
Warden::Manager.after_set_user(scope: :user, only: :fetch) do |user, auth, opts|