Switch default password hashing from bcrypt to argon2id, add LocaleFromUser middleware appended to web stack, and add HTTP-level throttle:5,1 on POST /login to satisfy the 429 rate-limit test. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| auth.php | ||
| channels.php | ||
| console.php | ||
| web.php | ||