| Summary: | Add captcha on OPAC user login screen. | ||
|---|---|---|---|
| Product: | Koha | Reporter: | Amit Gupta <amitddng135> |
| Component: | OPAC | Assignee: | Amit Gupta <amitddng135> |
| Status: | CLOSED WONTFIX | QA Contact: | Testopia <testopia> |
| Severity: | enhancement | ||
| Priority: | P5 - low | CC: | amit.gupta |
| Version: | Main | ||
| Hardware: | All | ||
| OS: | All | ||
| GIT URL: | Initiative type: | --- | |
| Sponsorship status: | --- | Comma delimited list of Sponsors: | |
| Crowdfunding goal: | 0 | Patch complexity: | --- |
| Documentation contact: | Documentation submission: | ||
| Text to go in the release notes: | Version(s) released in: | ||
| Circulation function: | |||
|
Description
Amit Gupta
2018-05-07 09:51:45 UTC
Hi Amit, can you please make this optional and maybe off by default? Maybe it would also be worth looking into other options? Captchas don't have a good reputation for causing problems with accessibility. What's the problem you experience? (In reply to Katrin Fischer from comment #1) > Hi Amit, can you please make this optional and maybe off by default? We are planning to do via System preference. > > Maybe it would also be worth looking into other options? Captchas don't have > a good reputation for causing problems with accessibility. > > What's the problem you experience? Due to some security related concern. Maybe it could be an option to implement a timeout instead. Block login for x minutes after z unsuccessful attempts? (In reply to Amit Gupta from comment #2) > (In reply to Katrin Fischer from comment #1) > > What's the problem you experience? > Due to some security related concern. A concern is different than a problem. If there is an existing problem with specific symptoms please describe them. Otherwise I think it's important to talk about what kind of potential problem a captcha is intended to solve. I think a captcha on login would be quite unusual, but we have other options now to stop people trying to get in, like blocking the account after several wrong attempts. And another solution would be to implement 2FA for the OPAC. Closing as WONTFIX. |