1
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2026-06-19 14:23:07 +00:00

keycloak_realm - add `max_secondary_auth_failures` parameter to configure brute force detection for secondary authentication mechanisms. (#12087)

* minor_changes:
  - keycloak_realm - add ``max_secondary_auth_failures`` parameter to configure brute force detection for secondary authentication mechanisms.

* Update changelogs/fragments/12087-keycloak-realm-max-secondary-auth-failures.yml

Co-authored-by: Felix Fontein <felix@fontein.de>

---------

Co-authored-by: Felix Fontein <felix@fontein.de>
This commit is contained in:
amPrimeSign 2026-06-02 18:27:11 +02:00 committed by GitHub
parent 1e3da48d70
commit 7b01bcbadf
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 10 additions and 0 deletions

View file

@ -0,0 +1,2 @@
minor_changes:
- keycloak_realm - add ``max_secondary_auth_failures`` parameter to configure brute force detection for secondary authentication mechanisms (https://github.com/ansible-collections/community.general/pull/12087).

View file

@ -329,6 +329,13 @@ options:
aliases:
- maxFailureWaitSeconds
type: int
max_secondary_auth_failures:
description:
- The realm max secondary authentication failures (used with brute force detection for secondary auth mechanisms).
aliases:
- maxSecondaryAuthFailures
type: int
version_added: 13.1.0
max_temporary_lockouts:
description:
- The realm max temporary lockouts.
@ -937,6 +944,7 @@ def main():
login_with_email_allowed=dict(type="bool", aliases=["loginWithEmailAllowed"]),
max_delta_time_seconds=dict(type="int", aliases=["maxDeltaTimeSeconds"]),
max_failure_wait_seconds=dict(type="int", aliases=["maxFailureWaitSeconds"]),
max_secondary_auth_failures=dict(type="int", aliases=["maxSecondaryAuthFailures"]),
max_temporary_lockouts=dict(type="int", aliases=["maxTemporaryLockouts"]),
minimum_quick_login_wait_seconds=dict(type="int", aliases=["minimumQuickLoginWaitSeconds"]),
not_before=dict(type="int", aliases=["notBefore"]),