feat: harden account security flows

2026-08-04 14:29:51 +08:00
parent 630252e2ff
commit c71b1351d6
14 changed files with 892 additions and 56 deletions
@@ -23,6 +23,7 @@ services:
      EMAIL_CODE_MINUTES: ${EMAIL_CODE_MINUTES:-10}
      EMAIL_CODE_RESEND_SECONDS: ${EMAIL_CODE_RESEND_SECONDS:-60}
      EMAIL_CODE_MAX_ATTEMPTS: ${EMAIL_CODE_MAX_ATTEMPTS:-5}
+      FRESH_AUTH_MINUTES: ${FRESH_AUTH_MINUTES:-5}
      TRUSTED_DEVICE_DAYS: ${TRUSTED_DEVICE_DAYS:-30}
      SESSION_COOKIE_SECURE: ${SESSION_COOKIE_SECURE:-true}
    ports: