Soft lock for Basic Auth

Server NGINX
#1

Hi all,

Is it possible to apply a soft lock timeout on invalid password attempts
for

        auth_basic "Login";

        auth_basic_user_file /etc/.htpasswd;
  • Quintin
#2

Hello!

On Tue, Aug 28, 2012 at 08:13:28PM +0530, Quintin P. wrote:

Hi all,

Is it possible to apply a soft lock timeout on invalid password attempts
for

        auth_basic "Login";

        auth_basic_user_file /etc/.htpasswd;

As far as I understand the question, something like this should
work:

error_page 401 /401.html;

location = /401.html {
    delay 1s;
}

Where the “delay” directive is added by a trivial module from [1].
(It may be equally done e.g. with embedded perl, or with
limit_req, but it’s usually a good idea to keep things simple.)

[1] http://mdounin.ru/hg/ngx_http_delay_module

Maxim D.