Skip to content

Throttle personal key verification attempts (LG-4354)#4820

Merged
mitchellhenke merged 2 commits intomainfrom
mitchellhenke/throttle-personal-key-verification
Mar 23, 2021
Merged

Throttle personal key verification attempts (LG-4354)#4820
mitchellhenke merged 2 commits intomainfrom
mitchellhenke/throttle-personal-key-verification

Conversation

@mitchellhenke
Copy link
Contributor

This throttles the number of times a user can try to re-verify their account with their personal key. Upon throttling, they'll see:

image

Messaging was copied from existing cases of throttling. (Draft while awaiting translations)

@mitchellhenke mitchellhenke force-pushed the mitchellhenke/throttle-personal-key-verification branch from 1171c48 to 7756588 Compare March 23, 2021 14:00
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Does it make sense to write something to the analytics hash when we're throttled?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, something should be logged. #4803 created new events. Does it make sense to keep that pattern here too (and for an upcoming PR on rate limiting GPO attempts)?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See also: LG-4404

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Andrew's work in #4803 made it much easier, only had to pass in analytics to the throttle call and it took care of the rest. Also updated the specs.

@mitchellhenke mitchellhenke force-pushed the mitchellhenke/throttle-personal-key-verification branch from 7756588 to 73ef5b8 Compare March 23, 2021 14:43
Copy link
Contributor

@stevegsa stevegsa left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. (other than the i18n build error...)

@mitchellhenke mitchellhenke force-pushed the mitchellhenke/throttle-personal-key-verification branch 2 times, most recently from 96f2757 to 1507f08 Compare March 23, 2021 20:25
@mitchellhenke mitchellhenke marked this pull request as ready for review March 23, 2021 20:32
@mitchellhenke mitchellhenke force-pushed the mitchellhenke/throttle-personal-key-verification branch from 1507f08 to 3c60ec2 Compare March 23, 2021 20:34
@mitchellhenke mitchellhenke merged commit 8caf271 into main Mar 23, 2021
@mitchellhenke mitchellhenke deleted the mitchellhenke/throttle-personal-key-verification branch March 23, 2021 20:46
aduth added a commit that referenced this pull request Mar 24, 2021
aduth added a commit that referenced this pull request Mar 25, 2021
* Revert "LG-4305: Log new event in case of lockout from proofing (#4803)"

This reverts commit 7c29df9.

* Revert throttle logging from #4820

* Revert throttler logging from #4827
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants