Better wording for login warning

[dik23]

This isn't a great way to describe what a user is seeing. Even people on my side of the fence are unsure what it means. An update to make it clearer would be great

[marcoambrosini]

cc @nextcloud/designers

How about just "Try again in 30 seconds"?

[nimishavijay]

Agreed! Do we know if it's because of any particular reason? Eg wrong email/password too many times, etc? We could also include something like "You have tried to log in too many times with a wrong account name, email or password. Try again in 30 seconds." (but that's still a nice-to-have, just "Try again in 30 seconds" sounds good to me)

[joshtrichards]

Is the bottom line here that the message basically gives out too much information so it feels like overload for a typical user?

I can see the elegance of just saying "Try again in 30 seconds" because the typical user probably doesn't care about the details (the why basically) - they just want to have their expectations sufficiently enough that they know what to do next.

Other than that, the original (existing) error seems accurate unless I'm missing something. (Though I'd change "IP" to "IP address").

If someone wants to clean up the message (which only kicks in after the delay has reached 5s), it's found here:

server/core/src/components/login/LoginForm.vue

Line 185 in 1bc8129

return t('core', 'We have detected multiple invalid login attempts from your IP. Therefore your next login is throttled up to 30 seconds.')

[rakekniven]

After reading the issue again calmly, I see no agreement for a text change.

I find the original message more informative. It lets the user know that the slowdown is caused by failed attempts from their own IP address.

Now user @himehatsumi created an PR #56763 .

So how to get this solved now?

[sarahsquirrel]

Can I suggest:
"Too many failed login attempts from your location. Try again in 30 seconds."
or better still
"Too many failed login attempts. Try again in 30 seconds."

Rationale:
"throttled up to 30 seconds" is odd / incorrect grammatically.
"throttled" is unnecessarily technical, let's keep it user friendly.
"IP / IP address" is unnecessarily technical.
the fewer the words the better; "we have detected" is not doing any lifting, here.

[rakekniven]

"Too many failed login attempts from your location. Try again in 30 seconds."

Like it