2 Commits

Author	SHA1	Message	Date
davide	f4eedaffe2	fix(security): replace in-memory rate limiting with persistent DB-backed limiter ... - Add LoginAttempt model to Prisma schema with migration - Create rate-limit.ts utility (10 attempts / 15 min window, DB-backed) - Apply rate limiting to login endpoint (replaces in-memory Map) - Apply rate limiting to change-password endpoint (previously unprotected) - Rate limit state survives server restarts and works across multiple instances	2026-05-19 10:10:57 +02:00
davide	a8d4c158b8	Commit iniziale	2026-05-18 15:25:38 +02:00