AndreyandClaude Opus 4.8 6ed2c175ef 🔒 fix(security): rate-limit sensitive auth endpoints (#4) ...

- DRF ScopedRateThrottle on login (10/min), password-reset request/confirm
  (5/min) and TOTP verify (10/min); rates configurable, disabled under tests
- throttling backed by the Redis cache in production
- test asserts login is rejected with 429 after the limit

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-23 18:47:17 +03:00

..

api

♻️ refactor(api): adopt DRF foundation and migrate products module

2026-06-23 17:50:40 +03:00

events

Expose platform foundation in Django admin

2026-06-17 18:33:06 +03:00

health

Initialize Edevs Hub repository

2026-06-17 18:14:16 +03:00

http

🔒 fix(security): make CORS allowlist env-driven (#7)

2026-06-23 18:40:04 +03:00

identity

🔒 fix(security): rate-limit sensitive auth endpoints (#4)

2026-06-23 18:47:17 +03:00

products

♻️ refactor(api): adopt DRF foundation and migrate products module

2026-06-23 17:50:40 +03:00

__init__.py

Initialize Edevs Hub repository

2026-06-17 18:14:16 +03:00