Package org.keycloak.services.managers

Class DefaultBruteForceProtector

java.lang.Object

org.keycloak.services.managers.DefaultBruteForceProtector

All Implemented Interfaces:

Runnable, org.keycloak.provider.Provider, org.keycloak.services.managers.BruteForceProtector

public class DefaultBruteForceProtector
extends Object
implements Runnable, org.keycloak.services.managers.BruteForceProtector

A single thread will log failures. This is so that we can avoid concurrent writes as we want an accurate failure count

Version:

$Revision: 1 $

Author:

Bill Burke

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
protected class	DefaultBruteForceProtector.FailedLogin
protected class	DefaultBruteForceProtector.LoginEvent
protected class	DefaultBruteForceProtector.ShutdownEvent
protected class	DefaultBruteForceProtector.SuccessfulLogin

Field Summary

Fields

Modifier and Type	Field	Description
protected org.keycloak.models.KeycloakSessionFactory	factory
protected long	failures
protected long	lastFailure
protected int	maxDeltaTimeSeconds
protected LinkedBlockingQueue<DefaultBruteForceProtector.LoginEvent>	queue
protected boolean	run
protected CountDownLatch	shutdownLatch
protected long	totalTime
static int	TRANSACTION_SIZE

Fields inherited from interface org.keycloak.services.managers.BruteForceProtector

DISABLED_BY_PERMANENT_LOCKOUT

Constructor Summary

Constructors

Constructor	Description
DefaultBruteForceProtector(org.keycloak.models.KeycloakSessionFactory factory)

Method Summary

Modifier and Type	Method	Description
void	cleanUpPermanentLockout(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserModel user)
void	close()
void	failedLogin(org.keycloak.models.RealmModel realm, org.keycloak.models.UserModel user, org.keycloak.common.ClientConnection clientConnection)
protected void	failure(org.keycloak.models.KeycloakSession session, DefaultBruteForceProtector.LoginEvent event)
protected org.keycloak.models.RealmModel	getRealmModel(org.keycloak.models.KeycloakSession session, DefaultBruteForceProtector.LoginEvent event)
protected org.keycloak.models.UserLoginFailureModel	getUserModel(org.keycloak.models.KeycloakSession session, DefaultBruteForceProtector.LoginEvent event)
boolean	isPermanentlyLockedOut(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserModel user)
boolean	isTemporarilyDisabled(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserModel user)
protected void	logFailure(DefaultBruteForceProtector.LoginEvent event)
void	run()
void	shutdown()
void	start()
protected void	success(org.keycloak.models.KeycloakSession session, DefaultBruteForceProtector.LoginEvent event)
void	successfulLogin(org.keycloak.models.RealmModel realm, org.keycloak.models.UserModel user, org.keycloak.common.ClientConnection clientConnection)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

run

protected volatile boolean run

maxDeltaTimeSeconds

protected int maxDeltaTimeSeconds

factory

protected org.keycloak.models.KeycloakSessionFactory factory

shutdownLatch

protected CountDownLatch shutdownLatch

failures

protected volatile long failures

lastFailure

protected volatile long lastFailure

totalTime

protected volatile long totalTime

queue

protected LinkedBlockingQueue<DefaultBruteForceProtector.LoginEvent> queue

TRANSACTION_SIZE

public static final int TRANSACTION_SIZE

See Also:

Constant Field Values

Constructor Detail

DefaultBruteForceProtector

public DefaultBruteForceProtector(org.keycloak.models.KeycloakSessionFactory factory)

Method Detail

failure

protected void failure(org.keycloak.models.KeycloakSession session,
                       DefaultBruteForceProtector.LoginEvent event)

getUserModel

protected org.keycloak.models.UserLoginFailureModel getUserModel(org.keycloak.models.KeycloakSession session,
                                                                 DefaultBruteForceProtector.LoginEvent event)

getRealmModel

protected org.keycloak.models.RealmModel getRealmModel(org.keycloak.models.KeycloakSession session,
                                                       DefaultBruteForceProtector.LoginEvent event)

start

public void start()

shutdown

public void shutdown()

run

public void run()

Specified by:

run in interface Runnable

success

protected void success(org.keycloak.models.KeycloakSession session,
                       DefaultBruteForceProtector.LoginEvent event)

logFailure

protected void logFailure(DefaultBruteForceProtector.LoginEvent event)

failedLogin

public void failedLogin(org.keycloak.models.RealmModel realm,
                        org.keycloak.models.UserModel user,
                        org.keycloak.common.ClientConnection clientConnection)

Specified by:

failedLogin in interface org.keycloak.services.managers.BruteForceProtector

successfulLogin

public void successfulLogin(org.keycloak.models.RealmModel realm,
                            org.keycloak.models.UserModel user,
                            org.keycloak.common.ClientConnection clientConnection)

Specified by:

successfulLogin in interface org.keycloak.services.managers.BruteForceProtector

isTemporarilyDisabled

public boolean isTemporarilyDisabled(org.keycloak.models.KeycloakSession session,
                                     org.keycloak.models.RealmModel realm,
                                     org.keycloak.models.UserModel user)

Specified by:

isTemporarilyDisabled in interface org.keycloak.services.managers.BruteForceProtector

isPermanentlyLockedOut

public boolean isPermanentlyLockedOut(org.keycloak.models.KeycloakSession session,
                                      org.keycloak.models.RealmModel realm,
                                      org.keycloak.models.UserModel user)

Specified by:

isPermanentlyLockedOut in interface org.keycloak.services.managers.BruteForceProtector

cleanUpPermanentLockout

public void cleanUpPermanentLockout(org.keycloak.models.KeycloakSession session,
                                    org.keycloak.models.RealmModel realm,
                                    org.keycloak.models.UserModel user)

Specified by:

cleanUpPermanentLockout in interface org.keycloak.services.managers.BruteForceProtector

close

public void close()

Specified by:

close in interface org.keycloak.provider.Provider