44517da6f6
- Created AccountLockoutService to track failed login attempts - Accounts are locked after 5 failed attempts within 15 minutes - Lockout duration: 30 minutes (auto-unlock) - Service uses Redis for persistence (fail-open if Redis unavailable) - Integrated into AuthService Login method: * Check account lockout status before login * Record failed attempts (even for non-existent users to prevent enumeration) * Reset failed attempts counter on successful login * Auto-unlock expired accounts - Added SetAccountLockoutService method to AuthService - Service initialized in router when Redis is available Phase: PHASE-4 Priority: P1 Progress: 9/267 (3.4%) |
||
|---|---|---|
| .. | ||
| auth | ||
| collaboration | ||
| education | ||
| marketplace | ||
| social | ||
| track | ||