protected void updateThrottledSubmission(final HttpServletRequest request) {
        val duration = Beans.newDuration(getConfigurationContext().getCasProperties()
            .getAuthn().getThrottle().getFailure().getThrottleWindowSeconds());
        val expiration = ZonedDateTime.now(Clock.systemUTC()).plusSeconds(duration.toSeconds());
        val submission = (ThrottledSubmission) request.getAttribute(ThrottledSubmission.class.getSimpleName());
        if (submission != null && !submission.isStillInExpirationWindow()) {
            submission.setExpiration(expiration);
            LOGGER.info("Updated throttled submission's expiration date: [{}]", submission);
            getConfigurationContext().getThrottledSubmissionStore().put(submission);
        }
    }
Throttled login attempt action code used to tag the attempt in audit records.
support/cas-server-support-throttle-core/src/main/java/org/apereo/cas/throttle/AbstractThrottledSubmissionHandlerInterceptorAdapter.java