Fabien 'egg' O'Carroll e4cbb3d24d Reset magic link rate limiting upon successful login (#15345) ... refs https://github.com/TryGhost/Team/issues/1771 We don't have access to `req.brute.reset` due to the way the flow works, we have one endpoint which sends an email with a magic link, and another route which handles the login. We don't want to apply brute force protection to both because our rate limiting is designed for API requests not web page visits (which is how login is handled). Because of this we require access to the underlying ExpressBrute instance exposed by the spam-protection module, so that we can perform the reset.		2022-09-01 08:54:14 -04:00
..
admin	🔒 Fixed rate limiting for user login (#15336)	2022-08-31 10:33:42 -04:00
content	Updated tests to incl. host limit cases for core integrations	2022-08-12 14:18:44 +01:00
members	Reset magic link rate limiting upon successful login (#15345)	2022-09-01 08:54:14 -04:00
members-comments	🐛 Fixed commenting on tier-only posts (#15333)	2022-08-30 17:38:58 +02:00
shared	Added publication language to admin site endpoint	2022-08-23 12:04:07 +01:00