marketing-shibata50/multica
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(auth): reduce verification code rate limit from 60s to 10s

Browse source 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
yushen 2026-03-26 15:44:05 +08:00
parent de322f7a51
commit de1b7e3377
2 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apps/web/app/(auth)/login/page.tsx
View file

@ -54,7 +54,7 @@ function LoginPageContent() {
await sendCode(email);
setStep("code");
setCode("");
setCooldown(60);
setCooldown(10);
} catch (err) {
setError(
err instanceof Error ? err.message : "Failed to send code. Make sure the server is running."
@ -118,7 +118,7 @@ function LoginPageContent() {
setError("");
try {
await sendCode(email);
setCooldown(60);
setCooldown(10);
} catch (err) {
setError(
err instanceof Error ? err.message : "Failed to resend code"

4
server/internal/handler/auth.go
View file

@ -213,9 +213,9 @@ func (h *Handler) SendCode(w http.ResponseWriter, r *http.Request) {
return
}
// Rate limit: max 1 code per 60 seconds per email
// Rate limit: max 1 code per 10 seconds per email
latest, err := h.Queries.GetLatestCodeByEmail(r.Context(), email)
if err == nil && time.Since(latest.CreatedAt.Time) < 60*time.Second {
if err == nil && time.Since(latest.CreatedAt.Time) < 10*time.Second {
writeError(w, http.StatusTooManyRequests, "please wait before requesting another code")
return
}