[java-identity-provider] branch main updated: Add sample beans for TOTP account lockout.

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
https://codeberg.org/Shibboleth/java-identity-provider/commit/09e17546bb2003aca5c1e8584a3b6d3a758f7728

The following commit(s) were added to refs/heads/main by this push:
     new 09e17546b Add sample beans for TOTP account lockout.
09e17546b is described below

commit 09e17546bb2003aca5c1e8584a3b6d3a758f7728
Author: Scott Cantor <scott at restingparrotsoftware.com>
AuthorDate: Wed Jun 10 17:20:29 2026 -0400

    Add sample beans for TOTP account lockout.
---
 .../test/resources/net/shibboleth/idp/module/conf/global.xml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/idp-conf-impl/src/test/resources/net/shibboleth/idp/module/conf/global.xml b/idp-conf-impl/src/test/resources/net/shibboleth/idp/module/conf/global.xml
index d77bc6040..63a458396 100644
--- a/idp-conf-impl/src/test/resources/net/shibboleth/idp/module/conf/global.xml
+++ b/idp-conf-impl/src/test/resources/net/shibboleth/idp/module/conf/global.xml
@@ -183,6 +183,18 @@
         </property>
     </bean>
 
+    <bean id="shibboleth.authn.TOTP.AccountLockoutManager"
+        parent="shibboleth.StorageBackedAccountLockoutManager"
+        p:maxAttempts="5"
+        p:counterInterval="PT5M"
+        p:lockoutDuration="PT5M"
+        p:extendLockoutDuration="false"
+        p:lockoutKeyStrategy-ref="custom.TOTPLockoutStrategy" />
+
+    <bean id="custom.TOTPLockoutStrategy" parent="shibboleth.ContextFunctions.Expression"
+      c:_1="#input.ensureSubcontext(T(net.shibboleth.idp.authn.context.AuthenticationContext)).ensureSubcontext(T(net.shibboleth.idp.plugin.authn.totp.context.TOTPContext)).getUsername() + '!' + #custom.get().getRemoteAddr()"
+      p:customObject-ref="shibboleth.HttpServletRequestSupplier"/>
+
     <bean id="shibboleth.ExtensionSchemas" parent="shibboleth.DefaultExtensionSchemas">
         <property name="sourceList">
             <list merge="true">

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.