---
title: "Feature: #59231 - Hook for AbstractUserAuthentication::checkAuthentication()"
manual: "TYPO3 Core Changelog"
version: "main"
permalink: "https://docs.typo3.org/permalink/changelog:feature-59231"
source: "Changelog/7.4/Feature-59231-AddHookToAbstractUserAuthenticationCheckAuthentication.rst"
typo3-version: "7.4"
typo3-major: 7
type: "feature"
issue: 59231
forge: "https://forge.typo3.org/issues/59231"
tags: ["PHP-API", "Backend"]
rendered: "2026-09-18T10:44:28+00:00"
---

# Feature: #59231 - Hook for AbstractUserAuthentication::checkAuthentication() {#feature-59231}

See [forge#59231](https://forge.typo3.org/issues/59231)

## Description {#description}

Hook to post-process login failures in `AbstractUserAuthentication::checkAuthentication`.
By default the process sleeps for five seconds in case of failing. By using this hook, different solutions for
brute force protection can be implemented.

Register like this:

```php
$GLOBALS['TYPO3_CONF_VARS']['SC_OPTIONS']['t3lib/class.t3lib_userauth.php']['postLoginFailureProcessing'][] = 'My\\Package\\HookClass->hookMethod';
```