Adding Captcha to Login

[John Tatum]

I have a publicly accessible Jenkins instance that is being subjected to brute force login attempts. While these attempts have not been successful, I would prefer to prevent them alltogether. I looked for a plugin to add captcha to the login, but was surprised to find one does not exist. I found the JCaptcha plugin, but it can only add captcha to sign-up.

I thought that as long as Jenkins has been around, this would have been done some time ago. A google search on the subject turned up this from February of last year: http://jenkins-ci.361315.n4.nabble.com/Captcha-to-log-in-td4688919.html, but nothing since. This thread did get me looking at what I believe is the relevant portion of the API though. It looks to me like adding captcha to login might require a modification to Jenkins core.

I would like to know if there is a reason that this has not been done already? Also, is there any opposition to adding this support?


Thank You,

John Tatum