myron e8d13678fb Fix rate limiting triggering on login page loads ...

Only apply the tight 10/min bucket to POST /auth (actual login attempts).
GET /auth (session checks on page load) now falls into the general 120/min
bucket, preventing the login page from rate-limiting itself during normal use.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-09 10:53:18 +00:00

..

endpoints

Nginx proxy: local mode — Apache port migration, one-click enable/disable

2026-06-09 10:30:33 +00:00

index.php

Fix rate limiting triggering on login page loads

2026-06-09 10:53:18 +00:00