Replace global failed-attempt counter with per-client HashMap keyed by client identity (IP address for gateway, chat_id for Telegram). This prevents a single attacker from locking out all legitimate clients. Bounded state: entries are evicted after lockout expiry, and the map is capped at 1024 tracked clients. Closes #603 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| mod.rs | ||