Gronod 1eadb30481 fix(security #6): add rate limiting to POST /api/auth/login ...

Uses express-rate-limit@6 (pinned for Node 12 dev compat; Node 18
in prod container is unaffected). Limits each IP to 10 attempts per
15-minute window. Returns 429 with a safe error message on breach.

2026-05-16 16:18:34 +01:00

..

middleware

security: fix issues #1-4 from security audit

2026-05-16 15:07:50 +01:00

routes

fix(security #6): add rate limiting to POST /api/auth/login

2026-05-16 16:18:34 +01:00

utils

Revert "perf: split into fast poll + slow-cached library fetches"

2026-05-16 00:32:16 +01:00

index.js

security: fix issues #1-4 from security audit

2026-05-16 15:07:50 +01:00