org.keycloak.services.managers

Class BruteForceProtector

java.lang.Object

org.keycloak.services.managers.BruteForceProtector

All Implemented Interfaces:

Runnable

public class BruteForceProtector
extends Object
implements Runnable

A single thread will log failures. This is so that we can avoid concurrent writes as we want an accurate failure count

Version:

$Revision: 1 $

Author:

Bill Burke

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
protected class	BruteForceProtector.FailedLogin
protected class	BruteForceProtector.LoginEvent
protected class	BruteForceProtector.ShutdownEvent

Field Summary

Fields

Modifier and Type	Field and Description
protected KeycloakSessionFactory	factory
protected long	failures
protected long	lastFailure
protected static org.jboss.logging.Logger	logger
protected int	maxDeltaTimeSeconds
protected LinkedBlockingQueue<BruteForceProtector.LoginEvent>	queue
protected boolean	run
protected CountDownLatch	shutdownLatch
protected long	totalTime
static int	TRANSACTION_SIZE

Constructor Summary

Constructors

Constructor and Description
BruteForceProtector(KeycloakSessionFactory factory)

Method Summary

Modifier and Type	Method and Description
void	failedLogin(RealmModel realm, String username, org.keycloak.common.ClientConnection clientConnection)
void	failure(KeycloakSession session, BruteForceProtector.LoginEvent event)
protected RealmModel	getRealmModel(KeycloakSession session, BruteForceProtector.LoginEvent event)
protected UsernameLoginFailureModel	getUserModel(KeycloakSession session, BruteForceProtector.LoginEvent event)
boolean	isTemporarilyDisabled(KeycloakSession session, RealmModel realm, String username)
protected void	logFailure(BruteForceProtector.LoginEvent event)
void	run()
void	shutdown()
void	start()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

protected static org.jboss.logging.Logger logger

run

protected volatile boolean run

maxDeltaTimeSeconds

protected int maxDeltaTimeSeconds

factory

protected KeycloakSessionFactory factory

shutdownLatch

protected CountDownLatch shutdownLatch

failures

protected volatile long failures

lastFailure

protected volatile long lastFailure

totalTime

protected volatile long totalTime

queue

protected LinkedBlockingQueue<BruteForceProtector.LoginEvent> queue

TRANSACTION_SIZE

public static final int TRANSACTION_SIZE

See Also:

Constant Field Values

Constructor Detail

BruteForceProtector

public BruteForceProtector(KeycloakSessionFactory factory)

Method Detail

failure

public void failure(KeycloakSession session,
                    BruteForceProtector.LoginEvent event)

getUserModel

protected UsernameLoginFailureModel getUserModel(KeycloakSession session,
                                                 BruteForceProtector.LoginEvent event)

getRealmModel

protected RealmModel getRealmModel(KeycloakSession session,
                                   BruteForceProtector.LoginEvent event)

start

public void start()

shutdown

public void shutdown()

run

public void run()

Specified by:

run in interface Runnable

logFailure

protected void logFailure(BruteForceProtector.LoginEvent event)

failedLogin

public void failedLogin(RealmModel realm,
                        String username,
                        org.keycloak.common.ClientConnection clientConnection)

isTemporarilyDisabled

public boolean isTemporarilyDisabled(KeycloakSession session,
                                     RealmModel realm,
                                     String username)