From aa6b0fb7afd26ea3de419e16975758e0619a34de Mon Sep 17 00:00:00 2001
From: Stepan Usatiuk <stepanusatiuk@gmail.com>
Date: Thu, 28 Jun 2018 19:09:51 +0300
Subject: [PATCH] limit login attempts

---
 models/User.js | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/models/User.js b/models/User.js
index 2f4e107..ff5d7b8 100644
--- a/models/User.js
+++ b/models/User.js
@@ -21,7 +21,10 @@ const UserSchema = Schema({
   todos: [{ type: Schema.Types.ObjectId, ref: 'Todo' }],
 });
 
-UserSchema.plugin(passportLocalMongoose);
+UserSchema.plugin(passportLocalMongoose, {
+  limitAttempts: true,
+  maxAttempts: 20,
+});
 UserSchema.plugin(uniqueValidator);
 
 UserSchema.pre('remove', async function() {