fix(auth): prevent client-side rate limit bypass with server timestamp#396

Open

DeryFerd wants to merge 2 commits into

myrialabs:mainfrom

DeryFerd:fix/auth-rate-limit-server-timestamp

Commits on Jul 5, 2026

fix(auth): prevent client-side rate limit bypass with server timestamp validation Replace client-side countdown timer with server-controlled lockout timestamp. The previous implementation allowed b…
DeryFerd
committed
fix(auth): use string error message in validate-invite response CI type check failed because auth:validate-invite returned rate limit error as object { message, lockedUntil } but schema expects str…
DeryFerd
committed