AndreyandClaude Opus 4.8 6ed2c175ef 🔒 fix(security): rate-limit sensitive auth endpoints (#4) ...

- DRF ScopedRateThrottle on login (10/min), password-reset request/confirm
  (5/min) and TOTP verify (10/min); rates configurable, disabled under tests
- throttling backed by the Redis cache in production
- test asserts login is rejected with 429 after the limit

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-23 18:47:17 +03:00

..

backend

🔒 fix(security): rate-limit sensitive auth endpoints (#4)

2026-06-23 18:47:17 +03:00

checkout

Initialize Edevs Hub repository

2026-06-17 18:14:16 +03:00

internal-ui

🔒 fix(auth): unify password policy across all change paths (#5)

2026-06-23 18:17:00 +03:00

web-chat

Initialize Edevs Hub repository

2026-06-17 18:14:16 +03:00