Algis DumbrisandClaude Opus 4.6 6b65e0130f fix: login shows correct error + brute-force protection ...

- Wrong password now shows "Invalid username or password" (was "Session expired")
- Client API differentiates 401 on login page vs elsewhere
- Added per-IP login rate limiter: 3 failures → blocked 1 minute
- 429 status code returned with remaining seconds in message
- Rate limit cleared on successful login

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-27 06:28:19 +02:00

..

dist

fix: login shows correct error + brute-force protection

2026-03-27 06:28:19 +02:00

embed.go

fix: use all:dist embed pattern to include _app directory

2026-03-13 12:55:16 +02:00

handler.go

feat: implement Web UI with Svelte 5 SPA and REST API

2026-03-13 12:34:36 +02:00