[Bug] Disable brute force authentication security checks for specific IP addresses not possible?

[elitza-vasileva]

What happened?

I have blocked myself for logging into Matomo due to too many failed logins.

What should happen?

I then read this documentation about how to disable the brute force authentication security check for my IP address: https://matomo.org/faq/troubleshooting/faq_32758/

I tried to follow the instructions there and logged in to Matomo via my phone, but the described option was not available:

How can this be reproduced?

I went to our self-hosted Matomo URL -> Administration -> System -> General Settings -> Login

As mentioned above: the "Never block these IPs from logging in" does not exist. The same issue when I log in on my phone where I use a different browser.

Matomo version

5.2.1

PHP version

8.3.10

Server operating system

Linux

What browsers are you seeing the problem on?

Chrome

Computer operating system

Windows

Relevant log output

Validations

• Read our Contributing Guidelines.
• Follow our Security Policy.
• Check that there isn't already an issue that reports the same bug to avoid creating duplicates.
• The provided steps to reproduce is a minimal reproducible of the Bug.

[sgiehl]

Hey @elitza-vasileva. Thanks for the report.
For me that actually looks like expected and the option is available.
Are you maybe seeing any errors in your browser console or similar?

[randy-innocraft]

Hi @elitza-vasileva,
Could you please let me know if your user account has the role of Superuser?

[elitza-vasileva]

Hey @elitza-vasileva. Thanks for the report. For me that actually looks like expected and the option is available. Are you maybe seeing any errors in your browser console or similar?

Hi @sgiehl. No, I do not see any errors in the console or elswhere. One thing that might be a useful information is that I am logged in via http and not https, because we still haven't set up our own damin to make the connection secure.

[elitza-vasileva]

Hi @elitza-vasileva, Could you please let me know if your user account has the role of Superuser?

Yes, the account I am logged in with has the Superuser role.