silverstripe/silverstripe-framework — pull request #3577 by tractorcow (2014-10-24 00:49:12+00:00)
Title: BUG Fix BasicAuth not resetting failed login counts on authentication

FailedLoginCount would always be incremented whenever an authentication failed, but not reset on success. The actual reset of this counter would normally be done in `Member::logIn`, but this means that if we are merely authenticating the given credentials (i.e. proving these are correct, and not wishing to log them in) then the reset would never occur.

I've resolved this issue in the MemberAuthenticator by ensuring that the registerFailedLogin method is paired by registerSuccessfulLogin.

@simonwelsh do you see any risk in this fix from a BC perspective?

Also cc @wilr who originally reported this issue. Are you satisfied that this fixes the problem?