ratelimiter

type AuthLimiter interface {
	AllowLoginAttempt(ctx context.Context, ip net.IP, email string) (bool, error)
	AllowSignupAttempt(ctx context.Context, ip net.IP, email string) (bool, error)
	AllowPasswordResetAttempt(ctx context.Context, ip net.IP, email string) (bool, error)
	AllowPasskeyLoginAttempt(ctx context.Context, ip net.IP) (bool, error)
	AllowChallengeVerifyAttempt(ctx context.Context, ip net.IP) (bool, error)
	AllowChallengeResendAttempt(ctx context.Context, ip net.IP) (bool, error)
}

type CacheLimiter struct {
	// contains filtered or unexported fields
}

type InMemoryLimiter struct {
	// contains filtered or unexported fields
}

type LimiterConfig struct {
	LoginIPLimit     int
	LoginIPWindow    time.Duration
	LoginEmailLimit  int
	LoginEmailWindow time.Duration

	SignupIPLimit     int
	SignupIPWindow    time.Duration
	SignupEmailLimit  int
	SignupEmailWindow time.Duration

	PasswordResetIPLimit     int
	PasswordResetIPWindow    time.Duration
	PasswordResetEmailLimit  int
	PasswordResetEmailWindow time.Duration

	PasskeyLoginIPLimit  int
	PasskeyLoginIPWindow time.Duration

	ChallengeVerifyIPLimit  int
	ChallengeVerifyIPWindow time.Duration

	ChallengeResendIPLimit  int
	ChallengeResendIPWindow time.Duration

	CleanupEvery int
	MaxEntries   int
}

type RateLimitedError struct {
	RetryAfter time.Duration
	Scope      string
}