2

I am trying to call customer login api.

{{url}}/index.php/rest/V1/integration/customer/token

with body

{
    "username" : "[email protected]",
    "password" : "fsfsdf"
}

I am getting an error

"You did not sign in correctly or your account is temporarily disabled."

But i am able to login through magento website.This error is getting only for particular email ids.Please help me

2 Answers 2

7

This is an open issue in mganeto 2.

Github

Magento2 keeps track of failed attempts to get a token with an email and the wrong password (in the oauth_token_request_log table). If the failures_count column reaches the max allowed value (which is 6 by default). then authentication fails.

A temporary solution that i have done, is running cron job that does this cleanup on the database.

DELETE FROM oauth_token_request_log;

The above SQL will runs in every 1 minute.

1
  • You may compromise your security by running this (bruteforce attack). But it is still a very good workaround. Mar 9, 2017 at 13:17
0

please can you tell me how to run this DELETE FROM oauth_token_request_log; ?

2
  • As it’s currently written, your answer is unclear. Please edit to add additional details that will help others understand how this addresses the question asked. You can find more information on how to write good answers in the help center.
    – Community Bot
    Oct 14, 2021 at 11:14
  • If you have a new question, please ask it by clicking the Ask Question button. Include a link to this question if it helps provide context. - From Review
    – sv3n
    Oct 14, 2021 at 12:32

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.