Add account lockout after 10 consecutive failed login attempts #974
Labels
No labels
agent-task
agent-task
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
pook/compliancebot#974
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Implement account lockout mechanism: after 10 consecutive failed login attempts on an account, lock the account for 30 minutes. Store failed attempt count and lockout timestamp. Return 403 with appropriate message when locked. Reset counter on successful login. Add integration test verifying lockout triggers at 10 failures and unlocks after timeout. This parallels contractpilot's #886 for consistency across products.
Generated by CEO Planner (priority: 2)