Skip to content

Conversation

@avamachado-okta
Copy link

@avamachado-okta avamachado-okta commented Dec 8, 2025

Changes

Add Brute-Force Protection too_many_attempts error to passwordless error mappings to support adding Brute-Force Protection to passwordless/start endpoint

References

https://auth0team.atlassian.net/browse/EUP-23

Testing

This was tested alongside changes to enforce Brute-Force Protection on the passwordless/start endpoint behind a feature flag. The error is not currently emitted in this location.

  1. block user
  2. attempt passwordless login
  3. user will be blocked from continuing login since no Brute-Force Protection attempts remain
Screenshot 2025-12-08 at 9 56 36 AM Screenshot 2025-12-08 at 11 27 59 AM

The current behavior without this change just shows generic error when Brute-Force Protection is enforced and the feature flag is enabled:
Screenshot 2025-12-08 at 11 54 12 AM

  • This change adds unit test coverage
  • This change adds integration test coverage
  • This change has been tested on the latest version of the platform/language

Checklist

@avamachado-okta avamachado-okta requested a review from a team as a code owner December 8, 2025 19:38
@avamachado-okta avamachado-okta marked this pull request as draft December 8, 2025 21:24
@avamachado-okta avamachado-okta marked this pull request as ready for review December 17, 2025 19:59
@codecov
Copy link

codecov bot commented Dec 19, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 43.52%. Comparing base (e89a37d) to head (18051c2).
⚠️ Report is 55 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #2700      +/-   ##
==========================================
+ Coverage   42.54%   43.52%   +0.97%     
==========================================
  Files         120      120              
  Lines        3145     3180      +35     
  Branches      337      339       +2     
==========================================
+ Hits         1338     1384      +46     
+ Misses       1713     1701      -12     
- Partials       94       95       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@ankita10119
Copy link
Contributor

@claude

1 similar comment
@ankita10119
Copy link
Contributor

@claude

Copy link
Contributor

@ankita10119 ankita10119 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Verified these changes locally. Looks good to me.
Screenshot 2025-12-19 at 3 52 49 PM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants