• Author: Alex Louwe
• Date: 6/3/2026, 10:56:14 AM
• Message: fix: harden logincode auth, add rate limiting, persist to Directus issue #23
• Stats: 405 total changes (+251 / -154)

Changed Files

• src/hooks.server.js — +46 / -1 (47 changes)
• src/lib/server/helpers/limiters/apiKeyRequestLimiter.js — +0 / -7 (7 changes)
• src/lib/server/helpers/limiters/apiKeyVerifyLimiter.js — +0 / -7 (7 changes)
• src/lib/server/helpers/limiters/loginLimiter.js — +0 / -7 (7 changes)
• src/lib/server/helpers/limiters/verifyCodeLimiter.js — +0 / -7 (7 changes)
• src/lib/server/helpers/rateLimiter.js — +45 / -0 (45 changes)
• src/lib/server/helpers/requireAuth.js — +0 / -8 (8 changes)
• src/lib/server/services/authService.js — +13 / -20 (33 changes)
• src/lib/server/services/loginCodeManager.js — +42 / -39 (81 changes)
• src/lib/server/services/sessionManager.js — +88 / -33 (121 changes)
• src/routes/admin/login/+page.server.js — +11 / -9 (20 changes)
• src/routes/admin/login/+page.svelte — +5 / -15 (20 changes)
• src/routes/admin/logout/+page.server.js — +1 / -1 (2 changes)