mirror of
https://github.com/opensourcepos/opensourcepos.git
synced 2026-09-21 02:07:23 -04:00
objecttothis
a2b91493c7
* fix(auth): throttle login attempts to prevent brute-force attacks
Add Throttle filter and wire into login route to mitigate
credential-stuffing/brute-force risk (redacted).
- Register App\\Filters\\Throttle in Filters config
- Add \"too_many_attempts\" language string for throttled responses
- Add tests for Throttle filter and Login controller throttling
* Correct bug causing error to not display.
* i18n(login): add too_many_attempts translation for login throttling
Add localized \"too many attempts\" message across all language files
to support login throttling feature. Message informs users to wait
before retrying after exceeding attempt limit.
* fix(auth): rate limit login attempts to prevent brute-force attacks
Add Throttle filter that rate limits login/migrate POST requests,
keyed by IP and submitted username, using CodeIgniter's cache-based
Throttler (redacted).
- Wire filter into login/migrate routes
- Show localized error message when rate limit exceeded
- Broaden writable/cache ignore pattern to cover throttler cache file
* Update app/Language/ar-EG/Login.php
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
* style(i18n): use single quotes for translation array keys and values
Convert double-quoted array keys and string values to single quotes
across all Login.php language files for style consistency.
* test(auth): update LoginTest to use throttler service directly
Replace clearThrottleState's Services::resetSingle('throttler') call
with Services::throttler() to reset state via the service instance.
Add usedKeys property to track throttle keys used across test cases.
* test(auth): skip login test assertion when migration required
LoginTest now check migration-required response state before
asserting HTTP 200. Prevent false failures when app force
pending-migration redirect during test run.
* Added missing return statements
32 lines
2.1 KiB
PHP
32 lines
2.1 KiB
PHP
<?php
|
|
|
|
return [
|
|
"gcaptcha" => "",
|
|
"go" => "Start",
|
|
"initialization_message" => "",
|
|
"initialization_required" => "",
|
|
"initialize" => "",
|
|
"invalid_gcaptcha" => "",
|
|
"invalid_installation" => "",
|
|
"invalid_username_and_password" => "Ungültiger Benutzername/Passwort",
|
|
"login" => "Login",
|
|
"logout" => "Abmelden",
|
|
"migrating_database" => "Datenbank wird migriert",
|
|
"migration_auth_message" => "Administrator-Anmeldedaten sind erforderlich, um die Datenbank-Migration auf Version {0} zu autorisieren. Bitte melden Sie sich an, um fortzufahren.",
|
|
"migration_complete" => "Datenbank erfolgreich initialisiert!",
|
|
"migration_complete_login" => "Sie können sich jetzt anmelden.",
|
|
"migration_complete_migrate" => "Datenbank erfolgreich migriert!",
|
|
"migration_complete_redirect" => "Migration abgeschlossen. Weiterleitung zur Anmeldung...",
|
|
"migration_error_connection" => "Verbindungsfehler. Bitte versuchen Sie es erneut.",
|
|
"migration_failed" => "Migration fehlgeschlagen",
|
|
"migration_initializing" => "Datenbank wird initialisiert",
|
|
"migration_needed" => "Eine Datenbank-Migration auf {0} wird nach der Anmeldung gestartet.",
|
|
"migration_required" => "Datenbank-Migration erforderlich",
|
|
"migration_running" => "Datenbank-Migrationen werden ausgeführt...",
|
|
"password" => "Passwort",
|
|
"required_username" => "Das Feld Benutzername ist erforderlich.",
|
|
'too_many_attempts' => 'Zu viele Versuche. Bitte warten Sie einen Moment und versuchen Sie es erneut.',
|
|
"username" => "Benutzername",
|
|
"welcome" => "Willkommen bei {0}!"
|
|
];
|