mirror of
https://github.com/element-hq/matrix-authentication-service.git
synced 2026-09-18 03:35:43 +00:00
Add a dedicated `device_code_link` rate limiter for device authorization user code verification. This is to help mitigate the User Code Brute Forcing attack as described by [RFC 8628 section 5.1](https://datatracker.ietf.org/doc/html/rfc8628#section-5.1) Proposed default is 1 per minute and burst of 10. This can be overridden by the server admin.