pam

type BruteForceMitigationConfig struct {
	// AuthFailDelayThreshold is the number of consecutive authentication failures before
	// a delay is imposed on subsequent attempts, to mitigate brute-force attacks.
	AuthFailDelayThreshold int `mapstructure:"auth_fail_delay_threshold" yaml:"auth_fail_delay_threshold"`
	// AuthFailDelay is the delay imposed after AuthFailDelayThreshold consecutive failures.
	AuthFailDelay time.Duration `mapstructure:"auth_fail_delay" yaml:"auth_fail_delay"`
	// AuthFailResetWindow is the duration after the last failure before the failure count
	// is automatically reset, to avoid penalizing users indefinitely.
	AuthFailResetWindow time.Duration `mapstructure:"auth_fail_reset_window" yaml:"auth_fail_reset_window"`
}

type BruteForceOverride struct {
	AuthFailDelayThreshold *int           `mapstructure:"auth_fail_delay_threshold" yaml:"auth_fail_delay_threshold,omitempty"`
	AuthFailDelay          *time.Duration `mapstructure:"auth_fail_delay" yaml:"auth_fail_delay,omitempty"`
	AuthFailResetWindow    *time.Duration `mapstructure:"auth_fail_reset_window" yaml:"auth_fail_reset_window,omitempty"`
}

type Config struct {
	BruteForceMitigationConfig `mapstructure:",squash" yaml:",inline"`
	Services                   map[string]BruteForceOverride `mapstructure:"services" yaml:"services,omitempty"`
}

type Service struct {
	authd.UnimplementedPAMServer
	// contains filtered or unexported fields
}