By vijaycs85 on
Change record status:
Published (View all published change records)
Project:
Introduced in branch:
9.1.x
Introduced in version:
9.1.0-alpha1
Issue links:
Description:
The user module now responds with a 403 "access denied" when a login attempt is blocked by flood control.
In addition, the user module now has a user.flood_control service which builds on top of core's flood service.
This service dispatches an event when a login is blocked by flood control; either UserEvents::FLOOD_BLOCKED_IP or UserEvents::FLOOD_BLOCKED_USER.
By default, Drupal will log these events with notices such as:
Flood control blocked login attempt for uid 789
Flood control blocked login attempt from 12.34.12.34
Flood control blocked login attempt for uid 789 from 12.34.12.34
Impacts:
Site builders, administrators, editors
Module developers
Site templates, recipes and distribution developers
