0f377c7c

By: Michael Lynch <git@mtlynch.io>

Add per-IPv4 login rate limit

Limit each IPv4 address to two login attempts per existing rate-limit window while preserving the existing global login limit. This reduces login email abuse from a single IPv4 source without restricting IPv6 requests through the IPv4-specific limiter.

Suite timing

Time to Start Worker time Duration Time to finish Idle
Config 0s 3s 3s 3s 0s
Eval 2s 55s 55s 58s 0s
Build 6s 6m19s 1m17s 1m23s 0s
Suite 0s 7m18s 1m23s 1m23s 0s

Timeline

0s0s10s20s30s40s50s1m1m10s1m20s