Struct LoginAccountRateLimit 

pub struct LoginAccountRateLimit {
    pub per_second: f64,
    pub burst_count: u32,
}

Limits successful sign-ins to one account.

Only a sign-in by a verified password takes a token, so wrong guesses never lock the owner out on this axis.

Fields

per_second: f64

Token-bucket refill rate (sign-ins per second) for successful password logins to one account.

Applies to /login with m.login.password (but not to the LDAP binds it makes) and to the built-in OIDC login page, keyed on the account rather than the client IP. Mirrors Synapse’s rc_login.account and its default of burst_count sign-ins, then about one every five and a half minutes; once those are used up, a correct password is refused with M_LIMIT_EXCEEDED.

0 disables this limit rather than making a bucket that never refills.

reloadable: yes default: 0.003

burst_count: u32

Token-bucket depth (burst size) for successful password logins to one account.

The number of sign-ins allowed before per_second governs. 0 disables this limit, as does a 0 rate. The default is Synapse’s rc_login.account.burst_count.

reloadable: yes default: 5

Trait Implementations

impl Clone for LoginAccountRateLimit

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for LoginAccountRateLimit

impl Debug for LoginAccountRateLimit

fn fmt(&self, __derive_more_f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for LoginAccountRateLimit

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for LoginAccountRateLimit

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for LoginAccountRateLimit

fn fmt(&self, out: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.