Closed patheard closed 1 year ago
✅ Terraform Init: success
✅ Terraform Validate: success
✅ Terraform Format: success
✅ Terraform Plan: success
✅ Conftest: success
Plan: 0 to add, 1 to change, 0 to destroy
✅ Terraform Init: success
✅ Terraform Validate: success
✅ Terraform Format: success
✅ Terraform Plan: success
✅ Conftest: success
Plan: 1 to add, 1 to change, 0 to destroy
Summary
Add a JWT with a 5 minute expiry to prevent login replay attacks and prevent direct API requests to login through fuzzing attacks.
This will force all login requests to come through the frontend and ensure they only have a 5 minute window to enter their email address.