ratelimiter

type AuthLimiter interface {
	AllowLoginAttempt(ctx context.Context, ip net.IP, email string) (bool, error)
	AllowSignupAttempt(ctx context.Context, ip net.IP, email string) (bool, error)
	AllowPasswordResetAttempt(ctx context.Context, ip net.IP, email string) (bool, error)
	AllowChallengeVerifyAttempt(ctx context.Context, ip net.IP, challengeID string) (bool, error)
	AllowChallengeResendAttempt(ctx context.Context, ip net.IP, challengeID string) (bool, error)
}

type InMemoryLimiter struct {
	// contains filtered or unexported fields
}

type LimiterConfig struct {
	LoginIPLimit     int
	LoginIPWindow    time.Duration
	LoginEmailLimit  int
	LoginEmailWindow time.Duration

	SignupIPLimit     int
	SignupIPWindow    time.Duration
	SignupEmailLimit  int
	SignupEmailWindow time.Duration

	PasswordResetIPLimit     int
	PasswordResetIPWindow    time.Duration
	PasswordResetEmailLimit  int
	PasswordResetEmailWindow time.Duration

	ChallengeVerifyIPLimit  int
	ChallengeVerifyIPWindow time.Duration
	ChallengeVerifyIDLimit  int
	ChallengeVerifyIDWindow time.Duration

	ChallengeResendIPLimit  int
	ChallengeResendIPWindow time.Duration
	ChallengeResendIDLimit  int
	ChallengeResendIDWindow time.Duration

	CleanupEvery int
	MaxEntries   int
}

type RateLimitedError struct {
	RetryAfter time.Duration
	Scope      string
}