From 05943dad70ce17ff61b8c0352abeec0964ca14f0 Mon Sep 17 00:00:00 2001 From: tv Date: Sun, 8 Nov 2026 15:39:06 +0000 Subject: login: logins by key capped per user Review 6: a node remembers the challenges used until they expire, 10 000 at most, and refused every login by key once full. One user holding a key could make 10 000 logins within five minutes and keep everyone else out. A user may now log in by key at most --key-logins-per-user times (100) on a node within a challenge's lifetime, past which that user waits and others don't; the 10 000 stay as the cap for all users together. The lifetime, five minutes until now, is --challenge-lifetime. --- src/simtest/mod.rs | 2 ++ 1 file changed, 2 insertions(+) (limited to 'src/simtest/mod.rs') diff --git a/src/simtest/mod.rs b/src/simtest/mod.rs index 7fdc3f0..0ebb0ae 100644 --- a/src/simtest/mod.rs +++ b/src/simtest/mod.rs @@ -220,6 +220,8 @@ impl Sim { sign_every: Default::default(), token_lifetime: Duration::from_secs(3600), session_lifetime: Duration::from_secs(86400), + challenge_lifetime: Duration::from_secs(300), + key_logins_per_user: 100, cors_origins: Vec::new(), files: Arc::new(Files::default()), state_file: None, -- cgit v1.3.1