Add rate limiting to login endpoint

Introduced Flask-Limiter to restrict login attempts to 5 per minute per IP, enhancing security against brute-force attacks. Updated error handling to display a user-friendly message when the rate limit is exceeded. Minor improvements to the login page, including clearer error messages and display of the user's IP address.
2026-07-02 06:48:58 -07:00 · 2026-01-19 07:20:29 +01:00
parent 9b55632c86
commit 04f003c9f0
3 changed files with 58 additions and 40 deletions
@@ -30,6 +30,7 @@ dependencies = [
    "skyfield>=1.45",
    "pyserial>=3.5",
    "Werkzeug>=3.1.5",
+    "flask-limiter>=2.5.4",
 ]

 [project.urls]