M4-T02: add exponential login back-off service and wire into login endpoint

2026-06-21 21:20:28 +02:00
parent 64d3882c16
commit e480a84a44
9 changed files with 654 additions and 3 deletions
@@ -26,6 +26,9 @@ def test_database_urls(tmp_path: Path, monkeypatch: pytest.MonkeyPatch):
    monkeypatch.setenv("AUTH_BOOTSTRAP_USERNAME", "admin")
    monkeypatch.setenv("AUTH_BOOTSTRAP_PASSWORD", "test-password")
    monkeypatch.setenv("AUTH_COOKIE_SECURE_OVERRIDE", "false")
+    # Disable throttle by default so existing tests are unaffected; throttle
+    # tests opt in explicitly via their own monkeypatch / env override.
+    monkeypatch.setenv("AUTH_LOGIN_THROTTLE_ENABLED", "false")
    get_settings.cache_clear()
    reset_db_caches()