aac09e19

By: Michael Lynch <git@mtlynch.io>

Rate limit shared-secret login attempts

Add an in-memory rate limiter for shared-secret authentication attempts. Repeated login attempts now return 429 after exhausting the 24-hour limit.

Suite timing

Time to Start Worker time Duration Time to finish Idle
Config 0s 3s 3s 3s 0s
Eval 3s 1m46s 1m46s 1m50s 0s
Build 22s 7m28s 1m24s 1m46s 0s
Suite 0s 9m17s 1m49s 1m50s 0s

Timeline

0s10s20s30s40s50s1m1m10s1m20s1m30s1m40s1m50s