fs c45c636614 feat(security): add Memcached-based rate limiting for remember-token auto-login ...

Prevents brute-force attacks against remember-me cookies. Uses Memcached
(Cache::add + increment) to track failures per IP: 5 attempts in 15 min
window, auto-expiring via TTL. Counter resets on successful auto-login.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-14 15:57:29 +01:00

..

App

assign role roles

2026-03-13 21:11:48 +01:00

Domain/Taxonomy

major update

2026-03-04 15:56:58 +01:00

Http

fix(session): preserve intended URL across session timeout with remember-me

2026-03-13 18:28:13 +01:00

Repository

docs: add class docblocks, business-rule comments, and transaction wrapper

2026-03-13 21:58:51 +01:00

Service

feat(security): add Memcached-based rate limiting for remember-token auto-login

2026-03-14 15:57:29 +01:00

Support

fix: dismiss stale session-timeout flash on auto-login, resolve PHPStan and i18n issues

2026-03-13 18:56:19 +01:00