Paul LütznerandClaude Opus 5.5 ebeaf8cffa fix(security): add a per-username login limit ...

Symfony's default login throttle counts per username+IP and per IP, so a
guesser on many addresses got five tries per address at the same account,
while the comment in security.yaml claimed it was per username. A custom
LoginRateLimiter keeps both and adds a username-only limit (20 per 15
minutes, set above what a mistyping person reaches since it can also be
spent by someone else). Comment and handbook corrected.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-23 19:37:15 +02:00

..

accounts.md

fix: a partial OAuth grant was accepted in silence, and broke things quietly

2026-08-25 19:08:42 +02:00

admin.md

feat: failed requests raise a toast instead of breaking the page

2026-09-23 18:22:21 +02:00

appearance.md

feat: a running clock, in the topbar, under the name or in the sidebar

2026-09-23 14:06:43 +02:00

calendar-alerts.md

Write the handbook, and make it fail the build when it goes stale

2026-08-05 21:13:25 +02:00

calendar-invitations.md

small fixes that claude couldnt commit because who knows

2026-08-06 16:29:22 +02:00

calendar-sharing.md

Make the calendar hold together at every width

2026-09-15 15:52:00 +02:00

calendar-sync.md

small fixes that claude couldnt commit because who knows

2026-08-06 16:29:22 +02:00

calendar.md

Make the calendar hold together at every width

2026-09-15 15:52:00 +02:00

clients.md

Let a user remove a registered push device from settings

2026-08-07 17:06:53 +02:00

filters.md

Write the handbook, and make it fail the build when it goes stale

2026-08-05 21:13:25 +02:00

health.md

Recognise Google's weekly Testing expiry, and warn before the next one

2026-09-09 09:34:54 +02:00

integrations.md

Add Paperless-ngx as an attachment source and a save destination

2026-09-14 21:51:58 +02:00

mail.md

feat(search): show which words a result matched on

2026-09-22 17:18:08 +02:00

security.md

fix(security): add a per-username login limit

2026-09-23 19:37:15 +02:00