From 5d12616211a9f9e817789b7a09c5346cbdb6cde6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E5=90=89=E9=91=AB=E5=8D=87?= Date: Thu, 4 Jun 2026 14:34:42 +0800 Subject: [PATCH] =?UTF-8?q?chore:=20=E5=B0=86=E7=99=BB=E5=BD=95=E5=A4=B1?= =?UTF-8?q?=E8=B4=A5=E6=AC=A1=E6=95=B0=E4=B8=8A=E9=99=90=E4=BB=8E=205=20?= =?UTF-8?q?=E6=8F=90=E9=AB=98=E5=88=B0=20100?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-Authored-By: Claude Opus 4.8 (1M context) --- offline-backend-20260512/backend/app/gateway/routers/auth.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/offline-backend-20260512/backend/app/gateway/routers/auth.py b/offline-backend-20260512/backend/app/gateway/routers/auth.py index 22951c3a..c6807432 100644 --- a/offline-backend-20260512/backend/app/gateway/routers/auth.py +++ b/offline-backend-20260512/backend/app/gateway/routers/auth.py @@ -336,7 +336,7 @@ def _set_session_cookie(response: Response, token: str, request: Request) -> Non # production multi-worker setups, replace this with a shared store (Redis, # database-backed counter) to enforce a true per-IP limit. -_MAX_LOGIN_ATTEMPTS = 5 +_MAX_LOGIN_ATTEMPTS = 100 _LOCKOUT_SECONDS = 300 # 5 minutes # ip → (fail_count, lock_until_timestamp)