Skip to content

feat: Rate limiting / lockout security feature - #4

Merged
Vladush merged 5 commits into
masterfrom
feat/rate-limiting
Jan 5, 2026
Merged

Vladush merged 5 commits into
masterfrom
feat/rate-limiting

Conversation

@Vladush

@Vladush Vladush commented Jan 4, 2026

Copy link
Copy Markdown
Owner

Summary

Adds configurable per-user lockout after failed authentication attempts to prevent brute-force attacks.

Changes

  • Lockout state tracking in AuthEngine
  • Config options: lockout_attempts, lockout_duration_sec
  • Unit tests and documentation updates (pending)

Defaults

  • 5 failed attempts → 5 minute lockout
  • Set lockout_attempts = 0 to disable

@Vladush
Vladush merged commit a970ab4 into master Jan 5, 2026
5 checks passed
@Vladush
Vladush deleted the feat/rate-limiting branch January 5, 2026 10:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant