feat: remove django-axes

Refs: KEH-282, PT-2026

Author: charn

palvelutarjotin/auditlog_settings.py

@@ -27,9 +27,6 @@
     "social_django.nonce",  # auth model
     "social_django.partial",  # auth model
     "social_django.usersocialauth",  # auth model
-    "axes.accesslog",  # system model
-    "axes.accessattempt",  # system model
-    "axes.accessfailurelog",  # system model
     "django_ilmoitin.notificationtemplate_admins_to_notify",  # system model
     "django_ilmoitin.notificationtemplatetranslation",  # system model
     "occurrences.language",  # unimportant and causes lots of issues with factory

palvelutarjotin/settings.py

@@ -247,7 +247,6 @@ def sentry_traces_sampler(sampling_context: SamplingContext) -> float:
     "parler",
     "django_ilmoitin",
     "django_filters",
-    "axes",
     "django_admin_listfilter_dropdown",
     "auditlog",
     "auditlog_extra",
@@ -276,7 +275,6 @@ def sentry_traces_sampler(sampling_context: SamplingContext) -> float:
     "django.contrib.auth.middleware.AuthenticationMiddleware",
     "django.contrib.messages.middleware.MessageMiddleware",
     "django.middleware.clickjacking.XFrameOptionsMiddleware",
-    "axes.middleware.AxesMiddleware",
     "auditlog_extra.middleware.AuditlogMiddleware",
 ]
 
@@ -338,7 +336,6 @@ def sentry_traces_sampler(sampling_context: SamplingContext) -> float:
 }
 
 AUTHENTICATION_BACKENDS = [
-    "axes.backends.AxesBackend",
     "helusers.tunnistamo_oidc.TunnistamoOIDCAuth",  # For django-admin Keycloak login
     "helusers.auth.HelusersModelBackend",
     "palvelutarjotin.oidc.BrowserTestAwareJWTAuthentication",
@@ -447,11 +444,6 @@ def sentry_traces_sampler(sampling_context: SamplingContext) -> float:
 
 SERVICEMAP_API_CONFIG = {"ROOT": env.str("SERVICEMAP_API_ROOT")}
 
-AXES_FAILURE_LIMIT = 5
-AXES_COOLOFF_TIME = 1  # hour after locked out, user will be able to attempt login
-AXES_IPWARE_META_PRECEDENCE_ORDER = ["HTTP_X_FORWARDED_FOR", "REMOTE_ADDR"]
-AXES_IPWARE_PROXY_COUNT = 1
-
 LOGGING = {
     "version": 1,
     "disable_existing_loggers": False,

requirements.in

@@ -3,7 +3,6 @@ certifi
 django-admin-list-filter-dropdown
 django-auditlog
 django-auditlog-extra@https://github.com/City-of-Helsinki/django-auditlog-extra/archive/bff5fa3921d6821bebdd6be6c9fd20db39d32d54.zip
-django-axes
 django-cors-headers
 django-csp
 django-environ

requirements.txt

@@ -9,7 +9,6 @@ asgiref==3.10.0 \
     --hash=sha256:d89f2d8cd8b56dada7d52fa7dc8075baa08fb836560710d38c292a7a3f78c04e
     # via
     #   django
-    #   django-axes
     #   django-cors-headers
 asttokens==3.0.0 \
     --hash=sha256:0dcd8baa8d62b0c1d118b399b2ddba3c4aff271d0d7a9e0d4c1681c79035bbc7 \
@@ -285,7 +284,6 @@ django==5.2.12 \
     #   django-anymail
     #   django-auditlog
     #   django-auditlog-extra
-    #   django-axes
     #   django-cors-headers
     #   django-csp
     #   django-filter
@@ -320,10 +318,6 @@ django-auditlog==3.3.0 \
 django-auditlog-extra @ https://github.com/City-of-Helsinki/django-auditlog-extra/archive/bff5fa3921d6821bebdd6be6c9fd20db39d32d54.zip \
     --hash=sha256:34bfceb4392595daa3bbe52601d990e92c8320822d3a894e524660c24d71552d
     # via -r requirements.in
-django-axes==8.0.0 \
-    --hash=sha256:7ddc55f21b704b7e9b3e793a75deac01ff16cb67f561649b04336e1e96980035 \
-    --hash=sha256:f95b6ae67fd77d44cc688818cef174914c4ad98c48daf65020b6f03f37220e45
-    # via -r requirements.in
 django-cors-headers==4.9.0 \
     --hash=sha256:15c7f20727f90044dcee2216a9fd7303741a864865f0c3657e28b7056f61b449 \
     --hash=sha256:fe5d7cb59fdc2c8c646ce84b727ac2bca8912a247e6e68e1fb507372178e59e8