3 ms·
Existing libs for JWTs and PKCE Minimizing a credential stuffing attack requires detecting the attack and then adding captchas or other bot mitigation techniqu
by dickhardt 4y ago
Existing libs for JWTs and PKCE
Minimizing a credential stuffing attack requires detecting the attack and then adding captchas or other bot mitigation techniques.
- jaeming 4y agocaptcha integration is super easy and doesn't require a full auth integration service. Detecting a brute-force maybe less so maybe, though I get a lot of DDOS pretection for free with AWS & cloudfront. But I was more interested in the idea of letting users know they were trying to use a breached email/password on register or login. I've got that on bitwarden (password manager), though now days I just auto-generate any password.