Lock User After Consecutive Invalid Login Attempts

[rickyeng1]

Hi,

Using spring security, is it possible to lock a user's account after a number of consecutive invalid login attempts?

Thanks,
rickyeng1

[Luke Taylor]

Search the forum for "lock", e.g.

http://forum.springsource.org/showth...highlight=lock

http://forum.springsource.org/showth...highlight=lock

[rickyeng1]

Search the forum for "lock", e.g.

http://forum.springsource.org/showth...highlight=lock

http://forum.springsource.org/showth...highlight=lock

From the posts above it appears that I could accomplish this by listening for AbstractAuthenticationFailureEvent.

I have two questions:

1. How do I create a custom listener to listen for this type of event? Is there a specific interface that I need to implement?
2. Are there any special bean registration steps that I need to perform?

Regards,
rickyeng1