This commit is contained in:
Bill Burke 2017-12-16 07:12:32 -05:00
parent 1eec2747ef
commit 80be4c9dbc
2 changed files with 3 additions and 0 deletions

View file

@ -126,6 +126,7 @@ public abstract class AbstractUsernameFormAuthenticator extends AbstractFormAuth
context.getEvent().error(Errors.USER_DISABLED);
Response challengeResponse = disabledUser(context);
// this is not a failure so don't call failureChallenge.
//context.failureChallenge(AuthenticationFlowError.USER_DISABLED, challengeResponse);
context.forceChallenge(challengeResponse);
return false;
}
@ -135,6 +136,7 @@ public abstract class AbstractUsernameFormAuthenticator extends AbstractFormAuth
context.getEvent().error(Errors.USER_TEMPORARILY_DISABLED);
Response challengeResponse = temporarilyDisabledUser(context);
// this is not a failure so don't call failureChallenge.
//context.failureChallenge(AuthenticationFlowError.USER_TEMPORARILY_DISABLED, challengeResponse);
context.forceChallenge(challengeResponse);
return false;
}

View file

@ -300,6 +300,7 @@ public class BruteForceTest extends AbstractTestRealmKeycloakTest {
// KEYCLOAK-5420
// Test to make sure that temporarily disabled doesn't increment failure count
testingClient.testing().setTimeOffset(Collections.singletonMap("offset", String.valueOf(52)));
// should be unlocked now
loginSuccess();
clearUserFailures();
clearAllUserFailures();