[Django] #21289: Add login rate limiting to contrib.auth

[Django]

#21289: Add login rate limiting to contrib.auth
----------------------------------------+------------------------
Reporter: timo | Owner: nobody
Type: New feature | Status: new
Component: contrib.auth | Version: master
Severity: Normal | Keywords:
Triage Stage: Accepted | Has patch: 0
Needs documentation: 0 | Needs tests: 0
Patch needs improvement: 0 | Easy pickings: 0
UI/UX: 0 |
----------------------------------------+------------------------
This would need a design proposal. There are likely some third-party
packages that provide this that we could borrow from or consider including
in contrib.auth.

--
Ticket URL: <https://code.djangoproject.com/ticket/21289>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

[Django]

#21289: Add login rate limiting to contrib.auth

------------------------------+------------------------------------

Reporter: timo | Owner: nobody
Type: New feature | Status: new
Component: contrib.auth | Version: master

Severity: Normal | Resolution:

Keywords: | Triage Stage: Accepted
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0

------------------------------+------------------------------------

Comment (by sasha0):

Is the ticket still relevant? Considering availability of ready-made
solutions for the framework, like `django-ratelimit` etc.

--
Ticket URL: <https://code.djangoproject.com/ticket/21289#comment:1>

[Django]

#21289: Add login rate limiting to contrib.auth

------------------------------+------------------------------------

Reporter: timo | Owner: nobody
Type: New feature | Status: new
Component: contrib.auth | Version: master

Severity: Normal | Resolution:

Keywords: | Triage Stage: Accepted
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0

------------------------------+------------------------------------

Comment (by timgraham):

Yes, the idea is integrate something into core.

--
Ticket URL: <https://code.djangoproject.com/ticket/21289#comment:2>

[Django]

#21289: Add login rate limiting to contrib.auth

------------------------------+------------------------------------

Reporter: timo | Owner: nobody
Type: New feature | Status: new
Component: contrib.auth | Version: master

Severity: Normal | Resolution:

Keywords: | Triage Stage: Accepted
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0

------------------------------+------------------------------------
Changes (by sasha0):

* cc: sasha@… (added)

--
Ticket URL: <https://code.djangoproject.com/ticket/21289#comment:3>

[Django]

#21289: Add login rate limiting to contrib.auth

------------------------------+------------------------------------
Reporter: Tim Graham | Owner: nobody

Type: New feature | Status: new

Component: contrib.auth | Version: dev
Severity: Normal | Resolution:

Keywords: | Triage Stage: Accepted
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0

------------------------------+------------------------------------

Comment (by Carlton Gibson):

#33743 was a duplicate suggesting to "Add topic page on rate-limiting
solutions for Django to the documentation" in order to progress this
ticket, as it doesn't look like a consensus on a solution in core is near.

--
Ticket URL: <https://code.djangoproject.com/ticket/21289#comment:4>

[Django]

#21289: Add login rate limiting to contrib.auth

------------------------------+------------------------------------
Reporter: Tim Graham | Owner: nobody

Type: New feature | Status: new

Component: contrib.auth | Version: dev
Severity: Normal | Resolution:

Keywords: | Triage Stage: Accepted
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0

------------------------------+------------------------------------

Comment (by Mohamed El-Kalioby):

Is this still relevant, I can submit a patch for it.

--
Ticket URL: <https://code.djangoproject.com/ticket/21289#comment:5>

[Django]

#21289: Add login rate limiting to contrib.auth

------------------------------+------------------------------------
Reporter: Tim Graham | Owner: nobody

Type: New feature | Status: new

Component: contrib.auth | Version: dev
Severity: Normal | Resolution:

Keywords: | Triage Stage: Accepted
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0

------------------------------+------------------------------------

Comment (by ivanov17):

I think this is still relevant, it would be great to have such
functionality out of the box.

--
Ticket URL: <https://code.djangoproject.com/ticket/21289#comment:6>

[Django]

#21289: Add login rate limiting to contrib.auth

------------------------------+------------------------------------
Reporter: Tim Graham | Owner: nobody

Type: New feature | Status: new

Component: contrib.auth | Version: dev
Severity: Normal | Resolution:

Keywords: | Triage Stage: Accepted
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0

------------------------------+------------------------------------
Changes (by ivanov17):

* cc: ivanov17 (added)

--
Ticket URL: <https://code.djangoproject.com/ticket/21289#comment:7>

[Django]

#21289: Add login rate limiting to contrib.auth

------------------------------+------------------------------------
Reporter: Tim Graham | Owner: nobody

Type: New feature | Status: new

Component: contrib.auth | Version: dev
Severity: Normal | Resolution:

Keywords: | Triage Stage: Accepted
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0

------------------------------+------------------------------------
Changes (by Ülgen Sarıkavak):

* cc: Ülgen Sarıkavak (added)

--
Ticket URL: <https://code.djangoproject.com/ticket/21289#comment:8>

[Django]

#21289: Add login rate limiting to contrib.auth

------------------------------+---------------------------------------
Reporter: Tim Graham | Owner: Tom Carrick
Type: New feature | Status: assigned

Component: contrib.auth | Version: dev
Severity: Normal | Resolution:

Keywords: | Triage Stage: Accepted
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0

------------------------------+---------------------------------------
Changes (by Tom Carrick):

* owner: nobody => Tom Carrick
* status: new => assigned

--
Ticket URL: <https://code.djangoproject.com/ticket/21289#comment:9>