M4-T02: add exponential login back-off service and wire into login endpoint

2026-06-21 21:20:28 +02:00
parent 64d3882c16
commit e480a84a44
9 changed files with 654 additions and 3 deletions
@@ -49,6 +49,12 @@ CONFIG_FIELDS: tuple[ConfigField, ...] = (
        "auth_cookie_secure_override",
        "Cookie Secure Override",
    ),
+    ConfigField(
+        "Authentication",
+        "AUTH_LOGIN_THROTTLE_ENABLED",
+        "auth_login_throttle_enabled",
+        "Login Throttle Enabled",
+    ),
    ConfigField("Poo", "POO_WEBHOOK_ID", "poo_webhook_id", "Poo Webhook ID", secret=True),
    ConfigField(
        "Poo",
@@ -284,4 +290,6 @@ def _settings_payload(settings: Settings) -> dict[str, Any]:
        "auth_session_cookie_name": settings.auth_session_cookie_name,
        "auth_session_ttl_hours": settings.auth_session_ttl_hours,
        "auth_cookie_secure_override": settings.auth_cookie_secure_override,
+        "auth_login_throttle_enabled": settings.auth_login_throttle_enabled,
+        "auth_trust_forwarded_for": settings.auth_trust_forwarded_for,
    }