Skip to content

KEYCLOAK-15985 Add Brute Force Detection Lockout Event#8679

Merged
pedroigor merged 1 commit into
keycloak:mainfrom
paulbares:KEYCLOAK-15985
Sep 15, 2023
Merged

KEYCLOAK-15985 Add Brute Force Detection Lockout Event#8679
pedroigor merged 1 commit into
keycloak:mainfrom
paulbares:KEYCLOAK-15985

Conversation

@paulbares

@paulbares paulbares commented Nov 2, 2021

Copy link
Copy Markdown
Contributor

This PR aims to introduce a new event when a user account gets permanently locked up. Test BruteForceTest#testPermanentLockout has been updated accordingly.

Fixes #8769

@twwd

twwd commented May 31, 2022

Copy link
Copy Markdown

Can anyone please review this MR?

@trixpan

trixpan commented Jul 27, 2022

Copy link
Copy Markdown
Contributor

@abstractj this PR seem a fairly decent improvement around visibility of lockout events. Would any of the devs be able to review and merge?

@sgorbaty

sgorbaty commented Sep 11, 2023

Copy link
Copy Markdown

Bump! Would love to see this improvement.

@abstractj

Copy link
Copy Markdown
Contributor

Thanks @trixpan, as soon as the @keycloak/core has some bandwidth to review, they will do.

@pedroigor pedroigor left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@paulbares LGTM. Only a few comments.

Comment thread server-spi-private/src/main/java/org/keycloak/events/EventType.java Outdated
@pedroigor

pedroigor commented Sep 14, 2023

Copy link
Copy Markdown
Contributor

@paulbares If you rebase your PR and look at the remaining comment from me, we can then move forward with it.

@paulbares paulbares requested review from a team as code owners September 15, 2023 06:14
@paulbares paulbares requested a review from a team September 15, 2023 06:14
@paulbares paulbares requested a review from a team as a code owner September 15, 2023 06:14
@paulbares

Copy link
Copy Markdown
Contributor Author

@pedroigor I have made the changes and rebased my PR.

@ghost

ghost commented Sep 15, 2023

Copy link
Copy Markdown

Unreported flaky test detected

If the below flaky tests below are affected by the changes, please review and update the changes accordingly. Otherwise, a maintainer should report the flaky tests prior to merging the PR.

org.keycloak.testsuite.adapter.example.cors.CorsExampleAdapterTest#angularCorsProductTest

Keycloak CI - Base IT (2)

org.openqa.selenium.TimeoutException: 
Expected condition failed: waiting for text ('iphone') to be present in text ('') in element GrapheneElement -> [[ChromeDriver: chrome on LINUX (24e4fe53a0ef8c5a91e74fdaf1562e02)] -> id: output] (tried for 5 second(s) with 500 milliseconds interval)
Build info: version: '3.14.0', revision: 'aacccce0', time: '2018-08-02T20:19:58.91Z'
System info: host: 'fv-az400-887', ip: '10.1.0.115', os.name: 'Linux', os.arch: 'amd64', os.version: '6.2.0-1011-azure', java.version: '17.0.8.1'
Driver info: org.openqa.selenium.chrome.ChromeDriver$$EnhancerByGraphene$$e86d43e1
...

Report flaky test

@ghost ghost left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unreported flaky test detected, please review

@pedroigor pedroigor left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@paulbares Thanks for your time on it.

@pedroigor pedroigor merged commit f684a70 into keycloak:main Sep 15, 2023
@paulbares paulbares deleted the KEYCLOAK-15985 branch September 15, 2023 13:41
@paulbares

Copy link
Copy Markdown
Contributor Author

Great to see it merged, thank you @pedroigor for the review.

@cypress

cypress Bot commented Sep 16, 2023

Copy link
Copy Markdown

3 flaky tests on run #8968 ↗︎

0 1054 96 0 Flakiness 3

Details:

KEYCLOAK-15985 Add Brute Force Detection Lockout Event
Project: Keycloak Admin UI Commit: f684a70048
Status: Passed Duration: 13:40 💡
Started: Sep 17, 2023 12:22 AM Ended: Sep 17, 2023 12:36 AM
Flakiness  clients_test.spec.ts • 1 flaky test • firefox

View Output Video

Test Artifacts
Clients test > Advanced tab test > Clustering Output Screenshots
Flakiness  realm_settings_client_profiles_test.spec.ts • 1 flaky test • firefox

View Output Video

Test Artifacts
Realm settings client profiles tab tests > Should not create duplicate client profile Output Screenshots
Flakiness  masthead_test.spec.ts • 1 flaky test • firefox

View Output Video

Test Artifacts
Masthead tests > Desktop view > Go to account console and back to admin console Output Screenshots

This comment has been generated by cypress-bot as a result of this project's GitHub integration settings.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add Brute Force Detection Lockout Event

8 participants