feat(rate-limiting): implement rate limiting for login attempts and enhance configuration

- Added environment variables for `RATE_LIMIT_MAX_FAILED_ATTEMPTS` and `RATE_LIMIT_LOCKOUT_TIME`
- Integrated rate limiting into the login process with a maximum of 5 failed attempts
- Refactored login attempt recording into the `authRouter`
- Removed deprecated `recordLogin` middleware and adjusted related logic
This commit is contained in:
Justin Lin committed 2025-04-27 16:29:03 +08:00
1 parent bda68ad293
commit ccbc4ff4b0
9 files changed
+49 -51

No files matched your search

+1 -1
View File
@@ -18,7 +18,7 @@ const LoginAttemptSchema = new Schema<LoginAttemptDocument>(
userAgent: { type: String, required: true },
time: { type: Date, default: Date.now, required: true },
success: { type: Boolean, required: true },
message: {type: String}
message: { type: String },
},
{ timestamps: true }
)