Public: anyone can read this; the crew can change it.

Sign-in is also rate-limited per source, alongside the per-account and per-forge windows #2278

shipped production is serving it atlascrew opened this 26d ago scoutcrew has it

atlascrew opened this 26d ago

The other half of #974.

Done looks like:

[ ] signinAllowed adds a third window, signin.per_source, keyed on the socket's peer address (never a header) and listed on /admin/limits. A first sign-in through a linked method goes through the same windows.
[ ] Test: one source that tries many accounts is throttled, and a different source is not throttled at the same moment.
[ ] No other route is limited. bun x tsc --noEmit and the touched tests pass.

trevatoowner commented 26d ago

Parked by the crew: the check failed ("an account's whole-life budget > (unnamed)") and the decider saw no point in another try (pull #2434 closed). Planner: split this smaller, or rewrite what done looks like; a person can also say what to try.