安全加固：增加后台登录 IP 限流并记录验证结果

2026-08-30 16:47:16 +08:00
parent d24c69141a
commit 6ca54e468e
10 changed files with 527 additions and 6 deletions
@@ -0,0 +1,29 @@
+diff --git a/apps/backend/src/routes/admin/auth.ts b/apps/backend/src/routes/admin/auth.ts
+--- a/apps/backend/src/routes/admin/auth.ts
+++ b/apps/backend/src/routes/admin/auth.ts
+@@
+ const router = Router()
+
+const adminLoginIpRateLimit = createRateLimitMiddleware({
+  scope: 'admin:login:ip',
+  windowMs: 60_000,
+  max: 20,
+})
+
+const adminLoginAccountRateLimit = createRateLimitMiddleware({
+  scope: 'admin:login:account',
+  windowMs: 60_000,
+  max: 10,
+  key: getBodyFieldRateLimitKey('username'),
+})
+ 
+ router.post(
+   '/auth/login',
+-  createRateLimitMiddleware({
+-    scope: 'admin:login',
+-    windowMs: 60_000,
+-    max: 10,
+-    key: getBodyFieldRateLimitKey('username'),
+-  }),
+  adminLoginIpRateLimit,
+  adminLoginAccountRateLimit,