feat(auth): block admin login IP after 4 failures for 20 min, email login alerts

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-22 22:35:35 +07:00
parent fe68171aa7
commit e34362b9bd
16 changed files with 403 additions and 27 deletions
@@ -39,6 +39,7 @@ final class SubjectFormat
        'admin_trial_registration_request' => ['[ADMIN] yêu cầu dùng thử Cloud VPS', null, 'customer_name'],
        'admin_manual_deposit_pending'     => ['[ADMIN] yêu cầu nạp tiền chờ duyệt {{transaction_code}}', null, 'customer_name'],
        'admin_ticket_notification'        => ['[ADMIN] ticket mới #{{ticket_num}}', null, 'customer_name'],
+        'admin_login_alert'                => ['[ADMIN] {{admin_username}} đăng nhập trang quản trị từ IP {{client_ip}}', null, null],
        'admin_payment_received'           => ['[ADMIN] khách hàng thanh toán {{payment_type}} #{{reference}}', null, 'customer_name'],
        'admin_service_renewed'            => ['[ADMIN] {{admin_name}} gia hạn dịch vụ', 'product_name', 'customer_name'],
        'customer_signup_verify'           => ['[ADMIN] đơn hàng mới #{{order_num}}', null, 'customer_name'],