Andrey Antukh
04d7b623aa
✨ Add account lockout after failed login attempts
...
Implement per-account brute-force protection using a Redis-backed
failed-login counter. After 5 failed attempts within 15 minutes, the
account is temporarily locked out and all login attempts (including
with the correct password) are rejected with a 429 response.
Closes #11397
AI-assisted-by: longcat-2.0
2026-08-28 11:30:00 +02:00
..
2026-08-27 10:09:52 +02:00
2026-08-28 11:30:00 +02:00
2026-08-26 20:14:51 +02:00
2026-08-27 10:09:52 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-26 20:14:51 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-28 11:30:00 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-26 20:14:51 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-26 20:14:51 +02:00
2026-08-25 11:55:10 +02:00
2026-08-26 20:14:51 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-27 12:37:05 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00
2026-08-25 11:55:10 +02:00