xqvvu 1cc412e1d0 feat(security): account+IP login failure lockout and IP limit fail-closed ...

- Add loginLockout helpers on frequency_limit collection (assert, record, clear, audit log)
- Wire loginByPassword: lock before auth, count auth/password failures, clear on success
- useIPFrequencyLimit failClosed + authFrequencyLimit strict for Mongo errors
- Centralize PASSWORD_LOGIN_LOCK_SECONDS / LOGIN_FAIL_* in env.ts; slim type/env ProcessEnv
- Extend loginByPassword API tests (lockout via stubEnv + resetModules)

Made-with: Cursor

2026-04-15 14:13:00 +08:00

..

data

V4.14.10 dev (#6686)

2026-03-31 23:15:29 +08:00

public

Agent skill dev (#6668)

2026-04-07 22:52:03 +08:00

scripts

V4.14.7 features (#6406)

2026-02-12 16:37:50 +08:00

src

feat(security): account+IP login failure lockout and IP limit fail-closed

2026-04-15 14:13:00 +08:00

test

feat(security): account+IP login failure lockout and IP limit fail-closed

2026-04-15 14:13:00 +08:00

.env.template

feat: add openGauss DataVec as vector database backend (#6666)

2026-04-13 20:41:33 +08:00

Dockerfile

build: Bundle server.ts into a single CJS file (#6736)

2026-04-13 10:55:30 +08:00

next-i18next.config.js

V4.9.1 feature (#4206)

2025-03-18 14:40:41 +08:00

next.config.ts

Agent skill dev (#6668)

2026-04-07 22:52:03 +08:00

package.json

feat(sandbox): support multimedia preview and source/preview toggle in editor (#6723)

2026-04-10 23:02:59 +08:00

server.ts

Agent skill dev (#6668)

2026-04-07 22:52:03 +08:00

tsconfig.json

Doc (#6493)

2026-03-03 17:39:47 +08:00