feat(auth): block admin login IP after 4 failures for 20 min, email login alerts

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-22 22:35:35 +07:00
parent fe68171aa7
commit e34362b9bd
16 changed files with 403 additions and 27 deletions
@@ -189,6 +189,10 @@ final class EmailScenarioRegistry
            'label' => '[Admin] Ticket hỗ trợ mới', 'category' => self::INTERNAL, 'group' => 'SUPPORT',
            'required_variables' => ['ticket_num'],
        ],
+        'admin_login_alert' => [
+            'label' => '[Admin] Có người đăng nhập trang quản trị', 'category' => self::INTERNAL, 'group' => 'SECURITY',
+            'required_variables' => ['admin_username', 'client_ip', 'login_time'],
+        ],
    ];

    public static function find(?string ...$identifiers): ?string