ratelimiter

type AuthLimiter interface {
	AllowLoginAttempt(ctx context.Context, ip net.IP, email string) (bool, error)
	AllowSignupAttempt(ctx context.Context, ip net.IP, email string) (bool, error)
}

type InMemoryLimiter struct {
	// contains filtered or unexported fields
}

type LimiterConfig struct {
	LoginIPLimit     int
	LoginIPWindow    time.Duration
	LoginEmailLimit  int
	LoginEmailWindow time.Duration

	SignupIPLimit     int
	SignupIPWindow    time.Duration
	SignupEmailLimit  int
	SignupEmailWindow time.Duration

	CleanupEvery int
	MaxEntries   int
}

type RateLimitedError struct {
	RetryAfter time.Duration
	Scope      string // "login:ip", "login:email", "signup:ip", "signup:email"
}