org.keycloak.services.managers

Class DefaultBruteForceProtector

java.lang.Object

org.keycloak.services.managers.DefaultBruteForceProtector

All Implemented Interfaces:

Runnable, Provider, BruteForceProtector

public class DefaultBruteForceProtector
extends Object
implements Runnable, BruteForceProtector

A single thread will log failures. This is so that we can avoid concurrent writes as we want an accurate failure count

Version:

$Revision: 1 $

Author:

Bill Burke

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
protected class	DefaultBruteForceProtector.FailedLogin
protected class	DefaultBruteForceProtector.LoginEvent
protected class	DefaultBruteForceProtector.ShutdownEvent

Field Summary

Fields

Modifier and Type	Field and Description
protected KeycloakSessionFactory	factory
protected long	failures
protected long	lastFailure
protected static ServicesLogger	logger
protected int	maxDeltaTimeSeconds
protected LinkedBlockingQueue<DefaultBruteForceProtector.LoginEvent>	queue
protected boolean	run
protected CountDownLatch	shutdownLatch
protected long	totalTime
static int	TRANSACTION_SIZE

Constructor Summary

Constructors

Constructor and Description
DefaultBruteForceProtector(KeycloakSessionFactory factory)

Method Summary

Modifier and Type	Method and Description
void	close()
void	failedLogin(RealmModel realm, String username, org.keycloak.common.ClientConnection clientConnection)
void	failure(KeycloakSession session, DefaultBruteForceProtector.LoginEvent event)
protected RealmModel	getRealmModel(KeycloakSession session, DefaultBruteForceProtector.LoginEvent event)
protected UsernameLoginFailureModel	getUserModel(KeycloakSession session, DefaultBruteForceProtector.LoginEvent event)
boolean	isTemporarilyDisabled(KeycloakSession session, RealmModel realm, String username)
protected void	logFailure(DefaultBruteForceProtector.LoginEvent event)
void	run()
void	shutdown()
void	start()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

protected static ServicesLogger logger

run

protected volatile boolean run

maxDeltaTimeSeconds

protected int maxDeltaTimeSeconds

factory

protected KeycloakSessionFactory factory

shutdownLatch

protected CountDownLatch shutdownLatch

failures

protected volatile long failures

lastFailure

protected volatile long lastFailure

totalTime

protected volatile long totalTime

queue

protected LinkedBlockingQueue<DefaultBruteForceProtector.LoginEvent> queue

TRANSACTION_SIZE

public static final int TRANSACTION_SIZE

See Also:

Constant Field Values

Constructor Detail

DefaultBruteForceProtector

public DefaultBruteForceProtector(KeycloakSessionFactory factory)

Method Detail

failure

public void failure(KeycloakSession session,
                    DefaultBruteForceProtector.LoginEvent event)

getUserModel

protected UsernameLoginFailureModel getUserModel(KeycloakSession session,
                                                 DefaultBruteForceProtector.LoginEvent event)

getRealmModel

protected RealmModel getRealmModel(KeycloakSession session,
                                   DefaultBruteForceProtector.LoginEvent event)

start

public void start()

shutdown

public void shutdown()

run

public void run()

Specified by:

run in interface Runnable

logFailure

protected void logFailure(DefaultBruteForceProtector.LoginEvent event)

failedLogin

public void failedLogin(RealmModel realm,
                        String username,
                        org.keycloak.common.ClientConnection clientConnection)

Specified by:

failedLogin in interface BruteForceProtector

isTemporarilyDisabled

public boolean isTemporarilyDisabled(KeycloakSession session,
                                     RealmModel realm,
                                     String username)

Specified by:

isTemporarilyDisabled in interface BruteForceProtector

close

public void close()

Specified by:

close in interface Provider