The login requirement for our Grails app is that after two failed login attempts, the user is prompted with a new question right below the fields asking if the user forgot the password.
I’m using Spring Security plugin, is it possible to code it?
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I know in the latest version of spring-security-core (1.1.3), there’s an
LoginController.authfailcallback. You have access to the username there, so you could persist the number of consecutive failed login attempts as a field in the session. If it gets to 2, yourlogin/auth.gsppage andLoginController.authmethod could be updated to display this new question and process it on form submission.Without knowing more specifics it’s hard to tell if that will do everything you need, but it might be worth taking a look at.