Add captcha on OPAC user login screen.
Hi Amit, can you please make this optional and maybe off by default? Maybe it would also be worth looking into other options? Captchas don't have a good reputation for causing problems with accessibility. What's the problem you experience?
(In reply to Katrin Fischer from comment #1) > Hi Amit, can you please make this optional and maybe off by default? We are planning to do via System preference. > > Maybe it would also be worth looking into other options? Captchas don't have > a good reputation for causing problems with accessibility. > > What's the problem you experience? Due to some security related concern.
Maybe it could be an option to implement a timeout instead. Block login for x minutes after z unsuccessful attempts?
(In reply to Amit Gupta from comment #2) > (In reply to Katrin Fischer from comment #1) > > What's the problem you experience? > Due to some security related concern. A concern is different than a problem. If there is an existing problem with specific symptoms please describe them. Otherwise I think it's important to talk about what kind of potential problem a captcha is intended to solve.
I think a captcha on login would be quite unusual, but we have other options now to stop people trying to get in, like blocking the account after several wrong attempts. And another solution would be to implement 2FA for the OPAC. Closing as WONTFIX.