feat: add rate limiting, case-insensitive usernames and session security
This commit is contained in:
@@ -10,16 +10,16 @@ use Illuminate\Support\Facades\Route;
|
||||
|
||||
Route::middleware('guest')->group(function () {
|
||||
Route::get('login', [LoginController::class, 'create'])->name('login');
|
||||
Route::post('login', [LoginController::class, 'store']);
|
||||
Route::post('login', [LoginController::class, 'store'])->middleware('throttle:5,1');
|
||||
|
||||
Route::get('register', [RegisterController::class, 'create'])->name('register');
|
||||
Route::post('register', [RegisterController::class, 'store']);
|
||||
Route::post('register', [RegisterController::class, 'store'])->middleware('throttle:3,60');
|
||||
|
||||
Route::get('forgot-password', [ForgotPasswordController::class, 'create'])->name('password.request');
|
||||
Route::post('forgot-password', [ForgotPasswordController::class, 'store'])->name('password.email');
|
||||
Route::post('forgot-password', [ForgotPasswordController::class, 'store'])->name('password.email')->middleware('throttle:3,15');
|
||||
|
||||
Route::get('reset-password/{token}', [ResetPasswordController::class, 'create'])->name('password.reset');
|
||||
Route::post('reset-password', [ResetPasswordController::class, 'store'])->name('password.store');
|
||||
Route::post('reset-password', [ResetPasswordController::class, 'store'])->name('password.store')->middleware('throttle:5,15');
|
||||
|
||||
// Socialite routes
|
||||
Route::get('auth/{provider}', [SocialiteController::class, 'redirect'])->name('socialite.redirect');
|
||||
|
||||
Reference in New Issue
Block a user