Bug 20717 - Add captcha on OPAC user login screen.
Summary: Add captcha on OPAC user login screen.
Status: CLOSED WONTFIX
Alias: None
Product: Koha
Classification: Unclassified
Component: OPAC (show other bugs)
Version: Main
Hardware: All All
: P5 - low enhancement
Assignee: Amit Gupta
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-05-07 09:51 UTC by Amit Gupta
Modified: 2024-07-04 20:37 UTC (History)
1 user (show)

See Also:
GIT URL:
Initiative type: ---
Sponsorship status: ---
Comma delimited list of Sponsors:
Crowdfunding goal: 0
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Amit Gupta 2018-05-07 09:51:45 UTC
Add captcha on OPAC user login screen.
Comment 1 Katrin Fischer 2018-05-07 10:02:46 UTC
Hi Amit, can you please make this optional and maybe off by default?

Maybe it would also be worth looking into other options? Captchas don't have a good reputation for causing problems with accessibility.

What's the problem you experience?
Comment 2 Amit Gupta 2018-05-07 10:17:25 UTC
(In reply to Katrin Fischer from comment #1)
> Hi Amit, can you please make this optional and maybe off by default?
We are planning to do via System preference.
> 
> Maybe it would also be worth looking into other options? Captchas don't have
> a good reputation for causing problems with accessibility.
> 
> What's the problem you experience?
Due to some security related concern.
Comment 3 Katrin Fischer 2018-05-07 11:43:47 UTC
Maybe it could be an option to implement a timeout instead. Block login for x minutes after z unsuccessful attempts?
Comment 4 Owen Leonard 2018-05-07 11:45:26 UTC
(In reply to Amit Gupta from comment #2)
> (In reply to Katrin Fischer from comment #1)
> > What's the problem you experience?
> Due to some security related concern.

A concern is different than a problem. If there is an existing problem with specific symptoms please describe them. Otherwise I think it's important to talk about what kind of potential problem a captcha is intended to solve.
Comment 5 Katrin Fischer 2023-09-16 14:10:22 UTC
I think a captcha on login would be quite unusual, but we have other options now to stop people trying to get in, like blocking the account after several wrong attempts.

And another solution would be to implement 2FA for the OPAC.

Closing as WONTFIX.