davide f4eedaffe2 fix(security): replace in-memory rate limiting with persistent DB-backed limiter ...

- Add LoginAttempt model to Prisma schema with migration
- Create rate-limit.ts utility (10 attempts / 15 min window, DB-backed)
- Apply rate limiting to login endpoint (replaces in-memory Map)
- Apply rate limiting to change-password endpoint (previously unprotected)
- Rate limit state survives server restarts and works across multiple instances

2026-05-19 10:10:57 +02:00

..

migrations

fix(security): replace in-memory rate limiting with persistent DB-backed limiter

2026-05-19 10:10:57 +02:00

schema.prisma

fix(security): replace in-memory rate limiting with persistent DB-backed limiter

2026-05-19 10:10:57 +02:00