title: How can Spring Security defend against Brute Force?
body: <p>I am using Spring Security plugin in a Grails application for authentication and authorization.    It is possible for  a user to try and enter their password a countless amount of times. Is there a configuration setting that will apply some sort of defense against a brute force attack. For example, after 10 attempts, not allow the user a login attempt? </p>