Matthew Meszaros 91ec703093 fix: increment verification code tries on failed attempts ...

The Tries counter on login and registration sessions was checked but
never incremented, making the brute-force protection dead code. An
attacker could retry verification codes indefinitely within the session
TTL. Now each failed attempt increments and persists the counter.

2026-04-09 12:10:26 +00:00

..

cache.go

New Repository: Add Backend Code

2026-01-17 14:11:14 +00:00

config.go

New Repository: Add Backend Code

2026-01-17 14:11:14 +00:00

external_apple.go

New Repository: Add Backend Code

2026-01-17 14:11:14 +00:00

external_google.go

New Repository: Add Backend Code

2026-01-17 14:11:14 +00:00

gen.go

New Repository: Add Backend Code

2026-01-17 14:11:14 +00:00

login.go

fix: increment verification code tries on failed attempts

2026-04-09 12:10:26 +00:00

model.go

Update auth and onboarding flow

2026-02-14 05:38:27 +01:00

registration.go

fix: increment verification code tries on failed attempts

2026-04-09 12:10:26 +00:00

reset_password.go

fix: propagate captcha errors and fix JWT signing

2026-02-18 06:30:50 +01:00

service.go

frontend & email design; local email setup

2026-02-12 17:25:46 +01:00