1

I am trying to call customer login api.

{{url}}/index.php/rest/V1/integration/customer/token

with body

{
    "username" : "xxxxx@gmail.com",
    "password" : "fsfsdf"
}

I am getting an error

"You did not sign in correctly or your account is temporarily disabled."

But i am able to login through magento website.This error is getting only for particular email ids.Please help me

4

This is an open issue in mganeto 2.

Github

Magento2 keeps track of failed attempts to get a token with an email and the wrong password (in the oauth_token_request_log table). If the failures_count column reaches the max allowed value (which is 6 by default). then authentication fails.

A temporary solution that i have done, is running cron job that does this cleanup on the database.

DELETE FROM oauth_token_request_log;

The above SQL will runs in every 1 minute.

  • You may compromise your security by running this (bruteforce attack). But it is still a very good workaround. – Franck Garnier Mar 9 '17 at 13:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.