Marijn 89e7dd09ba Add rate limiting to login and season-code entry points ...

Neither /login nor the public season-code guess form (POST /) had
any throttling, making both an unlimited brute-force/enumeration
oracle. Adds symfony/rate-limiter and enables login_throttling on
the main firewall, plus a dedicated per-IP rate limiter on the
season-code form.

2026-07-13 09:56:39 +02:00

..

Backoffice

Add authorization checks to PrepareEliminationController

2026-07-13 09:09:04 +02:00

AbstractControllerWebTestCase.php

test: expand coverage, dedupe data-driven tests, extract shared WebTestCase base (#201)

2026-07-10 18:06:48 +02:00

EliminationControllerTest.php

test: expand coverage, dedupe data-driven tests, extract shared WebTestCase base (#201)

2026-07-10 18:06:48 +02:00

LoginControllerTest.php

Add rate limiting to login and season-code entry points

2026-07-13 09:56:39 +02:00

QuizControllerTest.php

Add rate limiting to login and season-code entry points

2026-07-13 09:56:39 +02:00

RegistrationControllerTest.php

test: expand coverage, dedupe data-driven tests, extract shared WebTestCase base (#201)

2026-07-10 18:06:48 +02:00

ResetPasswordControllerTest.php

test: expand coverage, dedupe data-driven tests, extract shared WebTestCase base (#201)

2026-07-10 18:06:48 +02:00

WellKnownControllerTest.php

test: expand coverage, dedupe data-driven tests, extract shared WebTestCase base (#201)

2026-07-10 18:06:48 +02:00