Files
Hugh Nimmo-Smith 357f83c96a Rate limit device code link attempts
Add a dedicated `device_code_link` rate limiter for device authorization user code verification.

This is to help mitigate the User Code Brute Forcing attack as described by [RFC 8628 section 5.1](https://datatracker.ietf.org/doc/html/rfc8628#section-5.1)

Proposed default is 1 per minute and burst of 10. This can be overridden by the server admin.
2026-09-11 13:17:56 +01:00
..