keycloak/docs/documentation/server_admin/topics/threat
Peter Skopek d11136f671 Separate password and OTP brute force protection to prevent OTP bypass attacks by default
Closes #46164

Signed-off-by: Peter Skopek <peter.skopek@ibm.com>

Update model/infinispan/src/main/java/org/keycloak/models/sessions/infinispan/changes/remote/updater/loginfailures/LoginFailuresUpdater.java

Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Signed-off-by: Peter Skopek <peter.skopek@ibm.com>

Add recovery codes to the list of brute force checked authenticators.

Closes #46164
Signed-off-by: Peter Skopek <peter.skopek@ibm.com>
2026-03-17 18:57:37 +01:00
..
admin.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
audience-limit.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
auth-sessions-limit.adoc fix: adding a -- separator for spi options (#40005) 2025-06-13 16:13:53 +02:00
brute-force.adoc Separate password and OTP brute force protection to prevent OTP bypass attacks by default 2026-03-17 18:57:37 +01:00
clickjacking.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
compromised-codes.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
compromised-tokens.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
csrf.adoc Write announcement and documentation for Account Console v3 (#26318) 2024-02-21 13:42:33 -05:00
fapi-compliance.adoc Move oidc documentation to guides (#31627) 2024-07-30 09:46:14 +02:00
host.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
oauth21-compliance.adoc Move oidc documentation to guides (#31627) 2024-07-30 09:46:14 +02:00
open-redirect.adoc Client policies: executor for validate and match a redirect URI 2024-02-20 08:37:33 +01:00
password-db-compromised.adoc Change password hashing defaults according to OWASP recommendations (#16629) 2024-01-24 18:35:51 +01:00
password.adoc Update brute force docs 2024-11-04 09:41:26 +00:00
read-only-attributes.adoc fix: adding a -- separator for spi options (#40005) 2025-06-13 16:13:53 +02:00
redirect.adoc Client policies: executor for validate and match a redirect URI 2024-02-20 08:37:33 +01:00
scope.adoc Updating and ordering the release notes 2025-12-08 10:55:33 +01:00
sql.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
ssl.adoc Moving docs to new folder 2023-03-20 09:07:58 +01:00
ssrf.adoc Executor for client uris pattern validation (#46300) 2026-02-24 16:26:00 +01:00
validate-user-attributes.adoc User attribute value length extension 2024-02-16 08:09:34 +01:00