|
|
@@ -95,9 +95,6 @@ async def login_user(request: LoginRequest):
|
|
|
logger.warning(f"Too many login attempts for {request.email}. User blocked.")
|
|
|
return JSONResponse(status_code=429, content={"message": ErrorResponse.TOO_MANY_ATTEMPTS})
|
|
|
else:
|
|
|
- # Set flag for last failed login
|
|
|
- redis_client.set(f"last_failed_login:{request.email}", "true")
|
|
|
- redis_client.expire(f"last_failed_login:{request.email}", 1800) # 30 minutes
|
|
|
logger.warning(f"Failed login attempt for {request.email}. Attempts: {attempts}")
|
|
|
logger.error("Invalid email or PIN.")
|
|
|
# Return unauthorized with attempts remaining
|