root 19037a9e4b feat(auth): apply LoginGuard to tenant and ops login endpoints ...

Wire LoginGuard into tenant-api and ops-api login flows: acquire a
permit before checking credentials, record a failure on every invalid
attempt to drive lockouts, and clear counters on success. Tenant-api
now also forwards the request IP into the service so per-IP and
IP+identifier limits actually fire under real traffic.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-30 01:07:16 +08:00

..

main.go

feat(auth): apply LoginGuard to tenant and ops login endpoints

2026-04-30 01:07:16 +08:00