Mike Jensen 09a33d86d6 Remove account lockout from failed recovery attempts (#35325) ...

* Remove account lockout from failed recovery attempts

This account lockout looks to be unecessary and potentially problematic.  Recovery codes and recovery through MFA are not possible to brute force.

In addition the potential to lockout an account from being able to use a recovery method could result in them being unable to unlock their account from other potential abuse cases (for example an attacker locking the account from failed password attempts).

As discussed in the RFD (https://github.com/gravitational/teleport/pull/35533) this includes the removal of all the API used for this locking mechanism.

* accountrecovery: Update `WithLock` function names

* accountrecovery: Combine verifyRecoveryCode and verifyRecoveryCodeWithRecord into one function

* Further GRPC cleanup after PR feedback

* Apply PR Feedback

2024-01-24 18:17:52 +00:00

..

Dockerfile

…

run-tests.sh

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

state.yaml

Remove account lockout from failed recovery attempts (#35325)

2024-01-24 18:17:52 +00:00

teleport.yaml

…