diff --git a/astro/public/img/docs/operate/secure-and-monitor/advanced-threat-detection-diagram.png b/astro/public/img/docs/operate/secure-and-monitor/advanced-threat-detection-diagram.png new file mode 100644 index 0000000000..701b5c2e2e Binary files /dev/null and b/astro/public/img/docs/operate/secure-and-monitor/advanced-threat-detection-diagram.png differ diff --git a/astro/src/content/docs/operate/secure-and-monitor/advanced-threat-detection.mdx b/astro/src/content/docs/operate/secure-and-monitor/advanced-threat-detection.mdx index d1ae1ac837..794424115e 100644 --- a/astro/src/content/docs/operate/secure-and-monitor/advanced-threat-detection.mdx +++ b/astro/src/content/docs/operate/secure-and-monitor/advanced-threat-detection.mdx @@ -8,9 +8,8 @@ subcategory: secure and monitor import Aside from 'src/components/Aside.astro'; import EnterprisePlanBlurb from 'src/content/docs/_shared/_enterprise-plan-blurb.astro'; import InlineField from 'src/components/InlineField.astro'; -import RateLimitDiagram from 'src/diagrams/docs/operate/secure-and-monitor/_rate-limit.astro'; import WebhookList from 'src/content/docs/extend/events-and-webhooks/events/_list-advanced-threat-detection-webhooks.mdx'; -import {YouTube} from '@astro-community/astro-embed-youtube'; +import { YouTube } from '@astro-community/astro-embed-youtube'; @@ -70,7 +69,7 @@ Rate limiting applies whether you are accessing FusionAuth through the admin UI An example of how rate limiting is applied for login is represented in the diagram below. - +![Diagram showing Advanced Threat Detection and how a User will be blocked.](/img/docs/operate/secure-and-monitor/advanced-threat-detection-diagram.png) If you need to lock an account after several failed logins, consider [user account locking](/docs/lifecycle/authenticate-users/setting-up-user-account-lockout). Using the account lockout feature rather than rate limiting offers additional flexibility in the duration. FusionAuth can also send emails or webhooks when it locks a user's account. diff --git a/astro/src/diagrams/docs/operate/secure-and-monitor/_rate-limit.astro b/astro/src/diagrams/docs/operate/secure-and-monitor/_rate-limit.astro deleted file mode 100644 index d6b71be4e7..0000000000 --- a/astro/src/diagrams/docs/operate/secure-and-monitor/_rate-limit.astro +++ /dev/null @@ -1,21 +0,0 @@ ---- -import Diagram from 'src/components/mermaid/FlowchartDiagram.astro'; - -//language=Mermaid -const code = ` -flowchart TB - A(User or attacker attempts to log in) --> B{{Is password correct?}} - B -- No --> C{{Is this the 5th failed login in a 60 second period that wasn't part of a lockout?}} - C -- Yes --> D(Login fails. Lock logins for this email address for 60 seconds) - C -- No --> E(Login fails) - B -- Yes --> F{{Is rate limit lockout in effect?}} - F -- No --> G(Login succeeds) - F -- Yes --> E -`; ---- - - \ No newline at end of file