Download the PHP package nowo-tech/login-throttle-bundle without Composer

On this page you can find all versions of the php package nowo-tech/login-throttle-bundle. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

  • Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
  • To use Composer is sometimes complicated. Especially for beginners.
  • Composer needs much resources. Sometimes they are not available on a simple webspace.
  • If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
  • Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?

Example code of nowo-tech/login-throttle-bundle

Informations about the package login-throttle-bundle

Login Throttle Bundle

CI Packagist Version Packagist Downloads

⭐ Found this useful? Give it a star on GitHub! It helps us maintain and improve the project.

Symfony bundle for login throttling using native Symfony login_throttling feature with pre-configured settings.

This bundle replaces deprecated bundles like anyx/login-gate-bundle by using Symfony's native login throttling feature introduced in Symfony 5.2.

Features

Installation

Then, register the bundle in your config/bundles.php:

Note: If you're using Symfony Flex, the bundle will be registered automatically and a default configuration file will be created at config/packages/nowo_login_throttle.yaml.

Configuration

When installed, a default configuration file is automatically created at config/packages/nowo_login_throttle.yaml (if not using Flex, it will be created on first bundle boot).

You can configure the login throttling settings:

Single Firewall Configuration (Simple):

Multiple Firewalls Configuration (Advanced):

See Configuration Documentation for more details on multiple firewalls configuration.

Configuration Options

Option Type Default Description
enabled bool true Enable or disable login throttling
max_count_attempts int 3 Maximum number of login attempts before throttling (maps to max_attempts in Symfony login_throttling)
timeout int 600 Ban period in seconds (maps to interval in Symfony login_throttling, e.g., 600 = 10 minutes)
watch_period int 3600 With storage: database, part of the generated limiter service ID and shared-limiter grouping. Counting/ban window uses timeout. For pruning old DB rows, call LoginAttemptRepository::cleanup($watchPeriod) from your own scheduled task (see DATABASE_STORAGE.md).
firewall string 'main' Firewall name where login_throttling should be applied
storage string 'cache' Storage backend: 'cache' (uses Symfony cache) or 'database' (stores in database via Doctrine ORM). See DATABASE_STORAGE.md for details.
rate_limiter string\|null null Custom rate limiter service ID (optional). If not provided, Symfony will use default login throttling rate limiter, or database rate limiter if storage=database
cache_pool string 'cache.rate_limiter' Cache pool to use for storing the limiter state (only used when storage=cache)
lock_factory string\|null null Lock factory service ID for rate limiter (optional, only used when storage=cache). Set to null to disable locking

Setup

Important: The bundle does NOT automatically configure security.yaml. You must run the command below or manually configure login_throttling in security.yaml.

After installing and configuring the bundle, you need to configure your security.yaml file with the login_throttling settings.

Automatic Configuration (Recommended)

Run the provided command to automatically configure security.yaml:

This command will:

  1. Read your nowo_login_throttle.yaml configuration
  2. Add or update login_throttling in your security.yaml
  3. Configure all firewalls specified in your bundle configuration (single or multiple)
  4. Automatically set the correct rate limiter service IDs (especially important for database storage)

Note: If login_throttling is already configured in security.yaml, the command will skip it unless you use the --force option.

Configuration Priority

What Symfony uses: Symfony's security system reads security.yaml directly. The login_throttling configuration in security.yaml is what actually controls throttling behavior.

What happens if configurations differ:

Best Practice: Configure the bundle in nowo_login_throttle.yaml and run the command to keep security.yaml in sync.

Manual Configuration

Alternatively, you can manually add the login_throttling configuration to your config/packages/security.yaml:

The interval value is automatically converted from seconds (in your bundle config) to a human-readable format (e.g., 600 seconds = '10 minutes').

Important: When configuring manually, ensure the configuration matches nowo_login_throttle.yaml to avoid confusion. For database storage, you must also ensure the rate limiter service IDs are correct (they are automatically generated by the bundle when processing configuration).

Migration from anyx/login-gate-bundle

This bundle is designed as a drop-in replacement for anyx/login-gate-bundle. The configuration options are compatible:

Quick Migration

  1. Remove old bundle:

  2. Install new bundle:

  3. Update configuration:

    Before (anyx/login-gate-bundle):

    After (nowo-tech/login-throttle-bundle):

  4. Configure security:

  5. Clear cache:

Complete Migration Guide

For detailed migration instructions, including storage migration, code changes, and troubleshooting, see the complete migration guide.

How It Works

This bundle uses Symfony's native login_throttling feature, which:

  1. Tracks failed login attempts per IP address and username combination
  2. Blocks further attempts when the maximum number of attempts is reached
  3. Automatically resets after the specified interval
  4. Uses Symfony's rate limiter component for efficient tracking

The throttling is handled automatically by Symfony's security system - you don't need to add any code to your controllers or authentication logic.

Requirements

Commands

Configure Security

Automatically configures security.yaml with login_throttling settings:

Options:

Development

Using Docker

Without Docker

Development Tools

Testing

The bundle includes comprehensive tests with 100% code coverage requirement. All tests are located in the tests/ directory.

Running Tests

Test Coverage

The bundle requires 100% code coverage. The CI/CD pipeline validates this requirement automatically.

Code Quality

The bundle uses PHP-CS-Fixer to enforce code style (PSR-12).

The GitHub Actions CI/CD pipeline automatically:

Tests and coverage

License

The MIT License (MIT). Please see LICENSE for more information.

Contributing

Contributions are welcome! Please feel free to submit a Pull Request.

Author

Created by Héctor Franco Aceituno at Nowo.tech

Service Configuration Examples

For detailed examples of service configurations for different deployment scenarios:

See docs/SERVICES.md for complete examples.

Demo Project

A complete demo project is included in the demo/ directory demonstrating:

Quick Start with Demo

Access the demo at: http://localhost:8001

See demo/README.md for detailed instructions.

FrankenPHP worker mode: Supported and documented for demos in docs/DEMO-FRANKENPHP.md.

Documentation

Additional documentation

Related

All versions of login-throttle-bundle with dependencies

PHP Build Version
Package Version
Requires php Version >=8.1 <8.6
symfony/framework-bundle Version ^6.0 || ^7.0 || ^8.0
symfony/security-bundle Version ^6.0 || ^7.0 || ^8.0
symfony/rate-limiter Version ^6.0 || ^7.0 || ^8.0
doctrine/orm Version ^2.15 || ^3.0
doctrine/doctrine-bundle Version ^2.10 || ^3.0
Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package nowo-tech/login-throttle-bundle contains the following files

Loading the files please wait ...