xqvvu 1cc412e1d0 feat(security): account+IP login failure lockout and IP limit fail-closed ...

- Add loginLockout helpers on frequency_limit collection (assert, record, clear, audit log)
- Wire loginByPassword: lock before auth, count auth/password failures, clear on success
- useIPFrequencyLimit failClosed + authFrequencyLimit strict for Mongo errors
- Centralize PASSWORD_LOGIN_LOCK_SECONDS / LOGIN_FAIL_* in env.ts; slim type/env ProcessEnv
- Extend loginByPassword API tests (lockout via stubEnv + resetModules)

Made-with: Cursor

2026-04-15 14:13:00 +08:00

..

api

feat: zod schema (#6740)

2026-04-10 22:55:44 +08:00

buffer/tts

next 15 (#6457)

2026-02-25 18:28:16 +08:00

bullmq

wechat publish (#6607)

2026-03-23 11:57:05 +08:00

cache

perf: redis del;perf: cron app run (#6113)

2025-12-18 11:09:13 +08:00

file

V4.14.8 dev (#6517)

2026-03-06 19:02:04 +08:00

geo

V4.14.7 features (#6406)

2026-02-12 16:37:50 +08:00

logger

Add Zod check for api (#6741)

2026-04-13 11:25:12 +08:00

metrics

chore: add cpu metrics, lower frequency to report metrics and trace (#6693)

2026-04-01 11:24:50 +08:00

middle

feat(security): account+IP login failure lockout and IP limit fail-closed

2026-04-15 14:13:00 +08:00

mongo

Agent skill dev (#6668)

2026-04-07 22:52:03 +08:00

proxy

S3 sdk (#6215)

2026-01-09 18:25:02 +08:00

redis

next 15 (#6457)

2026-02-25 18:28:16 +08:00

response

V4.14.7 features (#6406)

2026-02-12 16:37:50 +08:00

s3

Add Zod check for api (#6741)

2026-04-13 11:25:12 +08:00

secret

V4.14.7 features (#6406)

2026-02-12 16:37:50 +08:00

security

S3 sdk (#6215)

2026-01-09 18:25:02 +08:00

string

Add Zod check for api (#6741)

2026-04-13 11:25:12 +08:00

system

feat(security): account+IP login failure lockout and IP limit fail-closed

2026-04-15 14:13:00 +08:00

tracing

chore: add cpu metrics, lower frequency to report metrics and trace (#6693)

2026-04-01 11:24:50 +08:00

vectorDB

feat: add openGauss DataVec as vector database backend (#6666)

2026-04-13 20:41:33 +08:00