feat(auth): implement login security features including account locking and login attempt tracking

2026-07-29 10:47:26 -03:00
parent 45553dc514
commit 7c9ebc6d4d
18 changed files with 578 additions and 17 deletions
--- a/app/Domains/Auth/Models/User.php
+++ b/app/Domains/Auth/Models/User.php
@@ -29,6 +29,12 @@ class User extends Authenticatable
        return $this->hasMany(ResetPasswordAttempt::class);
    }

+    /** @return HasMany<LoginAttempt, $this> */
+    public function loginAttempts(): HasMany
+    {
+        return $this->hasMany(LoginAttempt::class);
+    }
+
    /**
     * @return array<string, string>
     */
@@ -37,6 +43,9 @@ class User extends Authenticatable
        return [
            'email_verified_at' => 'datetime',
            'password' => 'hashed',
+            'failed_login_attempts' => 'integer',
+            'last_failed_login_at' => 'datetime',
+            'locked_until' => 'datetime',
        ];
    }
 }