Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

smartens's avatar

Login Throttling Failed Attempts

I'm trying to override the $maxAttempts and $decayMinutes variables as per this article https://laraveldaily.com/laravel-too-many-login-attempts-restrict-and-customize/, can't get it too work.

The overrides don't appear to work as expected with Nova.

Does anyone have an idea on how to get this to work?

Thanks

0 likes
3 replies
bobbybouwmann's avatar
Level 88

This login throttling only works for your regular authentication. Nova uses its own authentication controller and therefore. For that controller, the throttling is not enabled.

You can override this behavior by overriding the LoginController from Nova if you wish.

// app/Providers/NovaServiceProvider.php

namespace App\Providers;

class NovaServiceProvider extends NovaApplicationServiceProvider
{
    public function register(): void
    {
        $this->app->bind(
             \Laravel\Nova\Http\Controllers\LoginController::class, 
             \App\Controllers\Nova\LoginController::class
        );
    }
}

You can then either copy over the Nova controller or extend that class. You're free to do whatever you want with the controller at this point.

2 likes
bobbybouwmann's avatar

@smartens Can you mark it as the best reply? I've seen this question before and it will help people to find answers for their questions ;)

Please or to participate in this conversation.