Improvement
Attempt limits announced on the login and password screens
Account & Security
When too many attempts are made in a row on the login, registration, password reset and verification screens, a message saying so appears on screen, and a new attempt can be made after a short while. On logout, the session ends both in the browser and on the server.
Screen by screen:
- Login: when the attempt limit kicks in, a message saying so appears on screen; the same message also appears at the top of the verification code (MFA) step.
- Forgot password: while the limit is active, a message explaining the situation is shown.
- Registration: the attempt limit message also appears on the registration screen.
- Resend verification email: the button stays disabled while the limit is active.
- Organisation creation: when the account limit is reached, the limit message is shown on screen.
- Logout: on logout, the session ends both in the browser and on the server.