Skip to content

Commit

Permalink
Merge pull request #454 from nextcloud/backport/390/stable25
Browse files Browse the repository at this point in the history
[stable25] Rename "user" to "account" in description
  • Loading branch information
AndyScherzinger authored May 14, 2023
2 parents e9ca928 + 2781baf commit 14ef9ea
Show file tree
Hide file tree
Showing 2 changed files with 19 additions and 19 deletions.
34 changes: 17 additions & 17 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,17 +1,17 @@
# BruteForceSettings

This app provides the possibility to manage some settings of the brute force protection in Nextcloud.

- [See app in NC AppStore](https://apps.nextcloud.com/apps/bruteforcesettings)

## Screenshot

![Screenshot of configuration](https://raw.githubusercontent.com/nextcloud/bruteforcesettings/master/screenshots/1.png)

## Description

Brute Force Protection is meant to protect Nextcloud servers from attempts to guess user passwords in various ways. Besides the obvious "*let's try a big list of commonly used passwords*" attack, it also makes it harder to use slightly more sophisticated attacks via the reset password form or trying to find app password tokens.

If triggered, brute force protection makes requests coming from an IP on a bruteforce protected controller with the same API slower for a 24 hour period.

With this app, the admin can exempt an IP address or range from this protection which can be useful for testing purposes or when there are false positives due to a lot of users on one IP address.
# BruteForceSettings

This app provides the possibility to manage some settings of the brute force protection in Nextcloud.

- [See app in NC AppStore](https://apps.nextcloud.com/apps/bruteforcesettings)

## Screenshot

![Screenshot of configuration](https://raw.githubusercontent.com/nextcloud/bruteforcesettings/master/screenshots/1.png)

## Description

Brute Force Protection is meant to protect Nextcloud servers from attempts to guess passwords and tokens in various ways. Besides the obvious "*let's try a big list of commonly used passwords*" attack, it also makes it harder to use slightly more sophisticated attacks via the reset password form or trying to find app password tokens.

If triggered, brute force protection makes requests coming from an IP on a bruteforce protected controller with the same API slower for a 24 hour period.

With this app, the admin can exempt an IP address or range from this protection which can be useful for testing purposes or when there are false positives due to a lot of people on a single IP address.
4 changes: 2 additions & 2 deletions appinfo/info.xml
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@
<name>Brute-force settings</name>
<summary>Whitelist IPs</summary>
<description><![CDATA[Brute Force Protection is meant to protect Nextcloud servers from attempts to
guess user passwords in various ways. Besides the obvious "*let's try a big
guess account passwords in various ways. Besides the obvious "*let's try a big
list of commonly used passwords*" attack, it also makes it harder to use
slightly more sophisticated attacks via the reset password form or trying to
find app password tokens.
Expand All @@ -14,7 +14,7 @@ bruteforce protected controller with the same API slower for a 24 hour period.
With this app, the admin can exempt an IP address or range from this
protection which can be useful for testing purposes or when there are false
positives due to a lot of users on one IP address.]]></description>
positives due to a lot of accounts on one IP address.]]></description>
<version>2.5.0</version>
<licence>agpl</licence>
<author>Roeland Jago Douma</author>
Expand Down

0 comments on commit 14ef9ea

Please sign in to comment.