Extending Login Attempts

[kick]

At the moment there are options for what to do with the exceeded number of authorizations or two-factor authorization. But at the same time there are no settings for this. If we expand all this, then we will encounter a violation of the standards:

If a class extension is required to extend core methods then it must be extended properly, rather than overridden, by calling the parent method.

But why not set up an array with a minimum check? It will be convenient for everyone and those who want to configure and set their parameters. Just like shutting down the whole system. Some people don't need it. At the moment, it looks like a little crutch with little customization. Nor is it possible to change the value or time.

public function getAttemptLimits()
    {
        return [
            ['type' => 'user', 'time' => 60 * 5, 'count' => 4],
            ['type' => 'user', 'time' => 60 * 30, 'count' => 8],
            ['type' => 'ip',   'time' => 60 * 5, 'count' => 8],
            ['type' => 'ip',   'time' => 60 * 30, 'count' => 16]
        ];
    }

 

[Kirby]

Hmm, it is possible to change the values with a class extension without violating resource standards:

public function getAttemptLimits()
{
    $limits = parent::getAttemptLimits();

    // change first limit to 6 attempts within 10 minutes 
    $limits[0]['time'] = 60 * 10;
    $limits[0]['count'] = 6;

    return $limits;
}

So I am not sure what is actually suggested here?