Common Problem #3: How do I disable a user after a number of failed logins?
A common user requirement is to disable / lock an account after a number of failed login attempts. Acegi itself does not provide anything “out of the box”, however in your application you can implement and register an org.springframework.context.ApplicationListener. Inside your application event listener you can then check for an instanceof the particular AuthenticationFailureEvent and then call your application user management interface to update the user details. For example: public void onApplicationEvent(ApplicationEvent event) { // check failed event if(event instanceof AuthenticationFailurePasswordEvent){ // call user management interface to increment failed login attempts, etc. . . .
