zyycnandClaude c275119f12 fix(admin): remove login throttling to close the lockout DoS ...

The failure-count lockout keyed on request source was the wrong control
for this deployment: behind the mandated reverse proxy every login shares
the proxy peer address, so an unauthenticated attacker could trip the
shared bucket and lock the real administrator out for the window,
renewably. Remove the throttle end to end — the LoginError::Throttled
state, the LoginCommand source, the AuthStore/AdminAuthStateRepository
failure-window ports and their Redis Lua script, and the login-source
middleware — and let a wrong password return InvalidCredentials directly.
Online brute-force is bounded by the Argon2 verification cost and admin
password strength; deployments wanting rate limiting apply it at the
reverse proxy, which sees real client IPs.

Co-authored-by: Claude <noreply@anthropic.com>

2026-07-27 00:31:10 +08:00

..

apps/gateway

chore(release): prepare v3.0.0

2026-07-25 01:54:18 +08:00

crates

fix(admin): remove login throttling to close the lockout DoS

2026-07-27 00:31:10 +08:00

migrations

ci: freeze applied migrations behind a sha256 manifest

2026-07-26 23:20:38 +08:00

Cargo.lock

perf(openai,xai): trim passive quota round trips and stream chunk copies

2026-07-26 20:35:22 +08:00

Cargo.toml

refactor(backend): finalize gateway package boundaries

2026-07-25 00:33:11 +08:00

rust-toolchain.toml

refactor: migrate backend to Rust 1.97 and edition 2024

2026-07-12 19:10:56 +08:00