mirror of
https://github.com/opensourcepos/opensourcepos.git
synced 2026-09-21 10:15:01 -04:00
objecttothis
a2b91493c7
* fix(auth): throttle login attempts to prevent brute-force attacks
Add Throttle filter and wire into login route to mitigate
credential-stuffing/brute-force risk (redacted).
- Register App\\Filters\\Throttle in Filters config
- Add \"too_many_attempts\" language string for throttled responses
- Add tests for Throttle filter and Login controller throttling
* Correct bug causing error to not display.
* i18n(login): add too_many_attempts translation for login throttling
Add localized \"too many attempts\" message across all language files
to support login throttling feature. Message informs users to wait
before retrying after exceeding attempt limit.
* fix(auth): rate limit login attempts to prevent brute-force attacks
Add Throttle filter that rate limits login/migrate POST requests,
keyed by IP and submitted username, using CodeIgniter's cache-based
Throttler (redacted).
- Wire filter into login/migrate routes
- Show localized error message when rate limit exceeded
- Broaden writable/cache ignore pattern to cover throttler cache file
* Update app/Language/ar-EG/Login.php
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
* style(i18n): use single quotes for translation array keys and values
Convert double-quoted array keys and string values to single quotes
across all Login.php language files for style consistency.
* test(auth): update LoginTest to use throttler service directly
Replace clearThrottleState's Services::resetSingle('throttler') call
with Services::throttler() to reset state via the service instance.
Add usedKeys property to track throttle keys used across test cases.
* test(auth): skip login test assertion when migration required
LoginTest now check migration-required response state before
asserting HTTP 200. Prevent false failures when app force
pending-migration redirect during test run.
* Added missing return statements
32 lines
2.1 KiB
PHP
32 lines
2.1 KiB
PHP
<?php
|
|
|
|
return [
|
|
"gcaptcha" => "Non sono un robot.",
|
|
"go" => "Go",
|
|
"initialization_message" => "",
|
|
"initialization_required" => "",
|
|
"initialize" => "",
|
|
"invalid_gcaptcha" => "Verifica di non essere un robot.",
|
|
"invalid_installation" => "L'installazione non è corretta, controlla il tuo file php.ini.",
|
|
"invalid_username_and_password" => "Username o Password non validi.",
|
|
"login" => "Login",
|
|
"logout" => "Uscita",
|
|
"migrating_database" => "Migrazione del database",
|
|
"migration_auth_message" => "Le credenziali di amministratore sono richieste per autorizzare la migrazione del database alla versione {0}. Effettua il login per continuare.",
|
|
"migration_complete" => "Database inizializzato con successo!",
|
|
"migration_complete_login" => "È ora possibile effettuare il login.",
|
|
"migration_complete_migrate" => "Database migrato con successo!",
|
|
"migration_complete_redirect" => "Migrazione completata. Reindirizzamento al login...",
|
|
"migration_error_connection" => "Errore di connessione. Riprova.",
|
|
"migration_failed" => "Migrazione fallita",
|
|
"migration_initializing" => "Inizializzazione database",
|
|
"migration_needed" => "Dopo l'accesso verrà avviata una migrazione del database a {0}.",
|
|
"migration_required" => "Migratione del database richiesta",
|
|
"migration_running" => "Esecuzione migrazioni database...",
|
|
"password" => "Password",
|
|
"required_username" => "Il campo nome utente è obbligatorio.",
|
|
'too_many_attempts' => 'Troppi tentativi. Attendere un momento e riprovare.',
|
|
"username" => "Username",
|
|
"welcome" => "Benvenuto in {0}!"
|
|
];
|