Harden login and make personal-best records self-correct
Login: add an in-memory per-IP throttle (8 failed attempts -> 15-min lockout, 429 + Retry-After), raise the change-password minimum to 8 with a 72-char cap, and apply the same minimum on the StartOS Set Login Password action. Records: add a record_floor column for manually-pinned bests plus recomputeRecord(); the live record is now the direction-aware best of the best logged value and the floor, recomputed on entry edit/delete so it can drop again (never below the floor). Settings exposes the floor as an override and shows the live best as a placeholder. Bump package 0.1.6:0 -> 0.1.7:0 and the service-worker cache to v7.
This commit is contained in:
@@ -15,7 +15,7 @@ const dict = {
|
||||
'Set Login Password': 6,
|
||||
'Set the password Gunner uses to log in to Premier Gunner': 7,
|
||||
'Password': 8,
|
||||
'The password Gunner types on the login screen (at least 4 characters)': 9,
|
||||
'The password Gunner types on the login screen (at least 8 characters)': 9,
|
||||
} as const
|
||||
|
||||
/**
|
||||
|
||||
Reference in New Issue
Block a user