implement account lockout after 3 failed login attempts with 5-minute cooldown period

2026-04-29 17:00:37 +06:00
parent 459b60c9aa
commit a3929bec8d
11 changed files with 150 additions and 12 deletions
--- a/backend/internal/db/sqlc/querier.go
+++ b/backend/internal/db/sqlc/querier.go
@@ -18,6 +18,8 @@ type Querier interface {
 	GetDeliveryByID(ctx context.Context, id pgtype.UUID) (Delivery, error)
 	GetDeliveryCount(ctx context.Context) ([]GetDeliveryCountRow, error)
 	GetUserByUsername(ctx context.Context, username string) (User, error)
+	RecordFailedLogin(ctx context.Context, username string) (RecordFailedLoginRow, error)
+	ResetLoginFailures(ctx context.Context, username string) error
 	UpdateDelivery(ctx context.Context, arg UpdateDeliveryParams) error
 	UpdateDeliveryStatus(ctx context.Context, arg UpdateDeliveryStatusParams) error
 }