root a62c0e4b5d feat(auth): add LoginGuard for rate-limit and lockout primitives ...

Introduce a Redis-backed LoginGuard that combines per-IP, per-identifier
and IP+identifier rate limits, exponential lockout on consecutive failures,
and a concurrent-attempt lock so a single subject cannot pile up parallel
brute-force tries. The guard ships with an in-memory fallback when Redis
is unreachable so login protection keeps working under degraded mode.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-30 01:06:49 +08:00

..

claims.go

feat(desktop): implement workspace foundation + desktop-client skeleton

2026-04-19 14:18:20 +08:00

context_test.go

feat(auth): add workspace scope middleware and context

2026-04-24 22:18:54 +08:00

context.go

feat(auth): add workspace scope middleware and context

2026-04-24 22:18:54 +08:00

jwt_test.go

feat(desktop): implement workspace foundation + desktop-client skeleton

2026-04-19 14:18:20 +08:00

jwt.go

feat(desktop): implement workspace foundation + desktop-client skeleton

2026-04-19 14:18:20 +08:00

login_guard_test.go

feat(auth): add LoginGuard for rate-limit and lockout primitives

2026-04-30 01:06:49 +08:00

login_guard.go

feat(auth): add LoginGuard for rate-limit and lockout primitives

2026-04-30 01:06:49 +08:00

middleware_test.go

feat(desktop): implement workspace foundation + desktop-client skeleton

2026-04-19 14:18:20 +08:00

middleware.go

feat(desktop): implement workspace foundation + desktop-client skeleton

2026-04-19 14:18:20 +08:00

permissions_test.go

feat: add tenant and user management with migrations, handlers, and tests

2026-04-01 00:58:42 +08:00

permissions.go

feat: add tenant and user management with migrations, handlers, and tests

2026-04-01 00:58:42 +08:00

session_store_test.go

feat(redis): keep services running when Redis is unreachable

2026-04-30 01:06:08 +08:00

session_store.go

feat(redis): keep services running when Redis is unreachable

2026-04-30 01:06:08 +08:00