CAS 4.2.7 login throttling not working

[Meysam Shirazi]

Hello,

I'm trying to use throttling on CAS 4.2.7 but it seems that it's not working! I'v done that on CAS 3.5.2  and it worked fine!

my configuration(based on CAS documentaion):

depoyerConfigContext:

<alias name="inMemoryIpAddressThrottle" alias="authenticationThrottle"/>

cas.properties:

cas.throttle.failure.threshold=3
cas.throttle.failure.range.seconds=10

I found that event of context is "success" even for failed login when I debug postHandle method of AbstractThrottledSubmissionHandlerInterceptorAdapter so recordSubmissionFailure does not call therefor not counting for throttling!

thanks for any support.

Meysam

[Meysam Shirazi]

I find a related issue here but it's too old!

[Meysam Shirazi]

Any help?!

On Tuesday, February 6, 2018 at 11:31:14 AM UTC+3:30, Meysam Shirazi wrote:

[Meysam Shirazi]

it's resolved by switching to 4.2.0!