refactor: promo and email bruteforce defence

2026-04-24 21:18:29 +03:00
parent 86f944e544
commit 5ccb8ddabe
14 changed files with 423 additions and 51 deletions
@@ -57,6 +57,9 @@ SMTP_USE_SSL=False                                                           # U
 EMAIL_CODE_TTL_SECONDS=600                                                   # Email verification code lifetime
 EMAIL_CODE_RESEND_SECONDS=60                                                 # Minimum delay between code sends
 EMAIL_CODE_MAX_ATTEMPTS=5                                                    # Max attempts per code
+BRUTE_FORCE_MAX_FAILURES=5                                                   # Max failed code attempts in the throttle window
+BRUTE_FORCE_WINDOW_SECONDS=900                                               # Rolling window used to count failures
+BRUTE_FORCE_LOCK_SECONDS=1800                                                # Temporary lockout duration after too many failures

 # Payment Method Toggles
 YOOKASSA_ENABLED=True                                                         # Turn on YOOKASSA