xqvvu 1cc412e1d0 feat(security): account+IP login failure lockout and IP limit fail-closed ...

- Add loginLockout helpers on frequency_limit collection (assert, record, clear, audit log)
- Wire loginByPassword: lock before auth, count auth/password failures, clear on success
- useIPFrequencyLimit failClosed + authFrequencyLimit strict for Mongo errors
- Centralize PASSWORD_LOGIN_LOCK_SECONDS / LOGIN_FAIL_* in env.ts; slim type/env ProcessEnv
- Extend loginByPassword API tests (lockout via stubEnv + resetModules)

Made-with: Cursor

2026-04-15 14:13:00 +08:00

..

api

feat(security): account+IP login failure lockout and IP limit fail-closed

2026-04-15 14:13:00 +08:00

components/Markdown

V4.12.4 features (#5626)

2025-09-15 20:02:54 +08:00

pageComponents/app/detail/WorkflowComponents

V4.14.7 features (#6406)

2026-02-12 16:37:50 +08:00

pages/api

Add Zod check for api (#6741)

2026-04-13 11:25:12 +08:00

service

feat(sandbox): support multimedia preview and source/preview toggle in editor (#6723)

2026-04-10 23:02:59 +08:00

web

V4.14.10 dev (#6674)

2026-03-30 10:05:42 +08:00

tsconfig.json

feat: team permission refine (#4494) (#4498)

2025-04-10 11:11:54 +08:00