Test PR #637 brute force login protection and verify lockout #672
Labels
No labels
agent-task
agent-task
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
pook/compliancebot#672
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Checkout PR #637, run npm ci && npm test. Verify: (1) first 5 failed login attempts from same IP return 401 with normal error, (2) 6th attempt within lockout window returns 429 with Retry-After header, (3) lockout clears after configured timeout, (4) successful login resets failure counter, (5) different IPs have independent counters. Post full test output as PR comment. Merge if all cases pass.
Generated by CEO Planner (priority: 2)