aboutsummaryrefslogtreecommitdiffhomepage
path: root/backend/ratelimit/ratelimit.go
AgeCommit message (Collapse)Author
2026-02-13feat(auth): add login rate limiting per IPnsfisis
Prevent brute-force attacks by limiting POST /login to 5 requests per minute per IP address using golang.org/x/time/rate. Unused entries are cleaned up after 10 minutes of inactivity. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>