4 commits

Author	SHA1	Message	Date
senke	04c25aa24f	Phase 2 stabilisation: code mort, Modal→Dialog, feature flags, tests, router split, Rust legacy ... Bloc A - Code mort: - Suppression Studio (components, views, features) - Suppression gamification + services mock (projectService, storageService, gamificationService) - Mise à jour Sidebar, Navbar, locales Bloc B - Frontend: - Suppression modal.tsx deprecated, Modal.stories (doublon Dialog) - Feature flags: PLAYLIST_SEARCH, PLAYLIST_RECOMMENDATIONS, ROLE_MANAGEMENT = true - Suppression 19 tests orphelins, retrait exclusions vitest.config Bloc C - Backend: - Extraction routes_auth.go depuis router.go Bloc D - Rust: - Suppression security_legacy.rs (code mort, patterns déjà dans security/)	2026-02-14 17:23:32 +01:00
senke	875df12d8b	small fixes : cors + login loop	2026-02-07 20:36:48 +01:00
senke	39f7967e1e	incus deployement fully implemented, Makefile updated and make fmt ran	2026-01-13 19:47:57 +01:00
senke	ca4f8d021c	[BE-SEC-007] security: Implement account lockout after failed login attempts ... - Created AccountLockoutService to track failed login attempts - Accounts are locked after 5 failed attempts within 15 minutes - Lockout duration: 30 minutes (auto-unlock) - Service uses Redis for persistence (fail-open if Redis unavailable) - Integrated into AuthService Login method: * Check account lockout status before login * Record failed attempts (even for non-existent users to prevent enumeration) * Reset failed attempts counter on successful login * Auto-unlock expired accounts - Added SetAccountLockoutService method to AuthService - Service initialized in router when Redis is available Phase: PHASE-4 Priority: P1 Progress: 9/267 (3.4%)	2025-12-24 12:10:41 +01:00