feat(access): add guarded local password lifecycle and recovery
This commit is contained in:
@@ -146,6 +146,10 @@ cd /mnt/DATA/git/govoplan-core
|
||||
|
||||
## Login Throttling
|
||||
|
||||
Optional PostgreSQL password-recovery race checks and their disposable-database
|
||||
setup are documented in English and German in
|
||||
[docs/PASSWORD_RECOVERY_POSTGRES_TESTS.md](docs/PASSWORD_RECOVERY_POSTGRES_TESTS.md).
|
||||
|
||||
Interactive password login is throttled by normalized global login identity and by
|
||||
the directly connected client address. The deployment defaults are 10 identity
|
||||
failures and 100 client failures in a 15-minute window. Counters use
|
||||
|
||||
Reference in New Issue
Block a user