CTO H3R7Tech 4bf458f1b8 Merge HRT-62: IP-based rate limiting on /auth/login — validated CTO ...

- In-memory IP rate limiter: 5 attempts / 5min window
- 15 min block on exceed, HTTP 429 + Retry-After header
- Applied rate_limit_middleware on portal_server.py
- Tests: TestLoginRateLimit added (conflict resolved: keep both test classes)

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-27 15:24:07 +02:00

15 KiB

Raw Blame History

View Raw