Rimuove il limite di tentativi dal login

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
2026-07-25 16:57:59 +02:00
parent 6b00b2cb28
commit f534263c9c
2 changed files with 20 additions and 30 deletions
-5
View File
@@ -2,14 +2,10 @@
import Admin from '../../layouts/Admin.astro'; import Admin from '../../layouts/Admin.astro';
import { getDb } from '../../lib/db'; import { getDb } from '../../lib/db';
import { login, getSessionUser, landingFor, SESSION_COOKIE } from '../../lib/auth'; import { login, getSessionUser, landingFor, SESSION_COOKIE } from '../../lib/auth';
import { rateLimit } from '../../lib/rate-limit';
export const prerender = false; export const prerender = false;
let error = ''; let error = '';
if (Astro.request.method === 'POST') { if (Astro.request.method === 'POST') {
if (!rateLimit(`login:${Astro.clientAddress}`, 5, 15 * 60 * 1000)) {
error = 'Troppi tentativi: riprova tra 15 minuti.';
} else {
const form = await Astro.request.formData(); const form = await Astro.request.formData();
const token = login(getDb(), String(form.get('username') ?? ''), String(form.get('password') ?? '')); const token = login(getDb(), String(form.get('username') ?? ''), String(form.get('password') ?? ''));
if (token) { if (token) {
@@ -23,7 +19,6 @@ if (Astro.request.method === 'POST') {
} }
error = 'Credenziali non valide.'; error = 'Credenziali non valide.';
} }
}
--- ---
<Admin title="Login"> <Admin title="Login">
<h1>Accesso</h1> <h1>Accesso</h1>
-5
View File
@@ -2,7 +2,6 @@
import Base from '../layouts/Base.astro'; import Base from '../layouts/Base.astro';
import { getDb } from '../lib/db'; import { getDb } from '../lib/db';
import { login, getSessionUser, SESSION_COOKIE } from '../lib/auth'; import { login, getSessionUser, SESSION_COOKIE } from '../lib/auth';
import { rateLimit } from '../lib/rate-limit';
import { safeNext } from '../lib/safe-next'; import { safeNext } from '../lib/safe-next';
export const prerender = false; export const prerender = false;
@@ -14,9 +13,6 @@ if (existing && getSessionUser(getDb(), existing)) return Astro.redirect(dest);
let error = ''; let error = '';
if (Astro.request.method === 'POST') { if (Astro.request.method === 'POST') {
if (!rateLimit(`login:${Astro.clientAddress}`, 5, 15 * 60 * 1000)) {
error = 'Troppi tentativi: riprova tra 15 minuti.';
} else {
const form = await Astro.request.formData(); const form = await Astro.request.formData();
const token = login(getDb(), String(form.get('username') ?? ''), String(form.get('password') ?? '')); const token = login(getDb(), String(form.get('username') ?? ''), String(form.get('password') ?? ''));
if (token) { if (token) {
@@ -28,7 +24,6 @@ if (Astro.request.method === 'POST') {
} }
error = 'Credenziali non valide.'; error = 'Credenziali non valide.';
} }
}
--- ---
<Base title="Accedi" description="Area riservata InsanityLab"> <Base title="Accedi" description="Area riservata InsanityLab">
<section class="section"> <section class="section">