codegirl007 5bdaa8977f Fix auth throttle DoS and serialize admin bootstrap. ...

Evict/cap limiter keys, replace hard username lockouts with IP+user progressive delays cleared on success, and create bootstrap admins under the same advisory/mutex lock as role changes.

2026-08-22 11:54:10 -07:00

..

admin.go

Address follow-up review: cheaper avatars, list limits, less chatter.

2026-08-22 09:55:32 -07:00

auth_test.go

Harden auth: setup secret, throttling, session destroy, secure cookies.

2026-08-22 11:47:42 -07:00

auth.go

Fix auth throttle DoS and serialize admin bootstrap.

2026-08-22 11:54:10 -07:00

helpers_test.go

Tighten avatar decode and encoded size limits.

2026-08-22 07:58:58 -07:00

profile.go

Address follow-up review: cheaper avatars, list limits, less chatter.

2026-08-22 09:55:32 -07:00

server_test.go

Harden auth: setup secret, throttling, session destroy, secure cookies.

2026-08-22 11:47:42 -07:00

server.go

Fix auth throttle DoS and serialize admin bootstrap.

2026-08-22 11:54:10 -07:00

throttle_test.go

Fix auth throttle DoS and serialize admin bootstrap.

2026-08-22 11:54:10 -07:00

throttle.go

Fix auth throttle DoS and serialize admin bootstrap.

2026-08-22 11:54:10 -07:00