Authentication Rate Limiting

Description:

Stricter rate limits on authentication endpoints prevent brute force attacks and credential stuffing.

Problem it solves:

Auth endpoints are prime targets for attacks. Standard rate limits are too lenient for login/signup flows.

Key features:

• Lower threshold for auth endpoints

• IP-based limiting

• Account lockout after failures

• Gradual unlock periods