rosslh/coolify
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: correct login rate limiter key format to include IP address

Browse source
This commit is contained in:
Andras Bacsai 2025-10-28 10:32:19 +01:00
parent f300ba0118
commit 65e5b2ecdb
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/Providers/FortifyServiceProvider.php
View file

@ -139,7 +139,7 @@ public function boot(): void
// server('REMOTE_ADDR') gives the actual connecting IP before proxy headers
$realIp = $request->server('REMOTE_ADDR') ?? $request->ip();
return Limit::perMinute(5)->by($email.$realIp);
return Limit::perMinute(5)->by($email.'|'.$realIp);
});
RateLimiter::for('two-factor', function (Request $request) {