[GH-ISSUE #2669] Configure Brute Force behavior #885

New issue

Closed

opened 2026-03-07 20:56:11 +03:00 by kerem · 0 comments

kerem commented

2026-03-07 20:56:11 +03:00

Owner

Originally created by @MatthiasSchnoeke on GitHub (May 27, 2024).
Original GitHub issue: https://github.com/dbeaver/cloudbeaver/issues/2669

During login I receive very often the error message below. How to change/disable this behavior?

org.jkiss.dbeaver.DBException: Too frequent authentication requests
at io.cloudbeaver.service.security.bruteforce.BruteForceUtils.checkLoginInterval(BruteForceUtils.java:64)
at io.cloudbeaver.service.security.bruteforce.BruteForceUtils.checkBruteforce(BruteForceUtils.java:39)
at io.cloudbeaver.service.security.CBEmbeddedSecurityController.createNewAuthAttempt(CBEmbeddedSecurityController.java:1536)
at io.cloudbeaver.service.security.CBEmbeddedSecurityController.authenticate(CBEmbeddedSecurityController.java:1457)
at io.cloudbeaver.service.auth.impl.WebServiceAuthImpl.authLogin(WebServiceAuthImpl.java:91)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:568)

My cloudbeaver.conf:

{
server: {
serverPort: 8978,

    workspaceLocation: "workspace",
    contentRoot: "web",
    driversLocation: "drivers",

    rootURI: "/",
    serviceURI: "/api/",

    productConfiguration: "conf/product.conf",

    expireSessionAfterPeriod: 21600000,

    develMode: false,

    enableSecurityManager: false,

    database: {
        driver="mariadb",
        url: "jdbc:mariadb://xxx:3306/cloudbeavertest?autoreconnect=true",
        user: "xxx",
        password: "xxx",

        createDatabase: true,

        initialDataConfiguration: "conf/initial-data.conf",

        pool: {
            minIdleConnections: 0,
            maxIdleConnections: 10,
            maxConnections: 100,
            validationQuery: "SELECT 1"
        }
    }

},
app: {
    anonymousAccessEnabled: false,
    anonymousUserRole: "user",
    supportsCustomConnections: false,

    forwardProxy: false,

    publicCredentialsSaveEnabled: false,
    adminCredentialsSaveEnabled: false,

    resourceManagerEnabled: true,

    resourceQuotas: {
        dataExportFileSizeLimit: 10000000,
        resourceManagerFileSizeLimit: 500000,
        sqlMaxRunningQueries: 100,
        sqlResultSetRowsLimit: 100000,
        sqlResultSetMemoryLimit: 2000000,
        sqlTextPreviewMaxLength: 4096,
        sqlBinaryPreviewMaxLength: 261120
    },
    enabledAuthProviders: [
        "local"
    ],

    disabledDrivers: [
        "sqlite:sqlite_jdbc",
        "h2:h2_embedded",
        "clickhouse:yandex_clickhouse"
    ]

}

}

Originally created by @MatthiasSchnoeke on GitHub (May 27, 2024). Original GitHub issue: https://github.com/dbeaver/cloudbeaver/issues/2669 During login I receive very often the error message below. How to change/disable this behavior? org.jkiss.dbeaver.DBException: Too frequent authentication requests at io.cloudbeaver.service.security.bruteforce.BruteForceUtils.checkLoginInterval(BruteForceUtils.java:64) at io.cloudbeaver.service.security.bruteforce.BruteForceUtils.checkBruteforce(BruteForceUtils.java:39) at io.cloudbeaver.service.security.CBEmbeddedSecurityController.createNewAuthAttempt(CBEmbeddedSecurityController.java:1536) at io.cloudbeaver.service.security.CBEmbeddedSecurityController.authenticate(CBEmbeddedSecurityController.java:1457) at io.cloudbeaver.service.auth.impl.WebServiceAuthImpl.authLogin(WebServiceAuthImpl.java:91) at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77) at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.base/java.lang.reflect.Method.invoke(Method.java:568) --- My cloudbeaver.conf: { server: { serverPort: 8978, workspaceLocation: "workspace", contentRoot: "web", driversLocation: "drivers", rootURI: "/", serviceURI: "/api/", productConfiguration: "conf/product.conf", expireSessionAfterPeriod: 21600000, develMode: false, enableSecurityManager: false, database: { driver="mariadb", url: "jdbc:mariadb://xxx:3306/cloudbeavertest?autoreconnect=true", user: "xxx", password: "xxx", createDatabase: true, initialDataConfiguration: "conf/initial-data.conf", pool: { minIdleConnections: 0, maxIdleConnections: 10, maxConnections: 100, validationQuery: "SELECT 1" } } }, app: { anonymousAccessEnabled: false, anonymousUserRole: "user", supportsCustomConnections: false, forwardProxy: false, publicCredentialsSaveEnabled: false, adminCredentialsSaveEnabled: false, resourceManagerEnabled: true, resourceQuotas: { dataExportFileSizeLimit: 10000000, resourceManagerFileSizeLimit: 500000, sqlMaxRunningQueries: 100, sqlResultSetRowsLimit: 100000, sqlResultSetMemoryLimit: 2000000, sqlTextPreviewMaxLength: 4096, sqlBinaryPreviewMaxLength: 261120 }, enabledAuthProviders: [ "local" ], disabledDrivers: [ "sqlite:sqlite_jdbc", "h2:h2_embedded", "clickhouse:yandex_clickhouse" ] } }