Security measures proposal - User login brute force prevention, and more

Contribute Feature
5

It looks like we already have rate limits on password reset. Current behaviour:

  • Up to 1 reset per minute
  • Up to 6 requests per hour

I think that is sufficient for now.

2 curtidas