Secure API Access

[marclindemann]

Hi @svewap,

first of all: nice extension. we are evaluating the extension right now. it would be good to

• limit API Access to a specific IP
• limit request with wrong API key to avoid brute force

[svewap]

Hi @marclindemann !
At this point the extension has a log function. A log file is written whose size is measured. The file is practically used as a counter for failed logins. The advantage here is that the IP of the attacker is also logged. A lock after X attempts would of course be useful and should be included in the code.
I personally don't need the limitation to one IP because I think it can change at any time in a dynamic cloud, but I can still add this feature.