feat(auth): block admin login IP after 4 failures for 20 min, email login alerts

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
baodev0
2026-10-22 22:35:35 +07:00
co-authored by Claude Opus 5.5
parent fe68171aa7
commit e34362b9bd
16 changed files with 403 additions and 27 deletions
+9
View File
@@ -1,6 +1,7 @@
<?php
use App\Http\Controllers\Api\Admin\ActivityLog\ActivityLogController;
use App\Http\Controllers\Api\Admin\Auth\AdminLoginBlockController;
use App\Http\Controllers\Api\Admin\EmailLog\EmailLogController;
use App\Http\Controllers\Api\Admin\EmailTemplate\EmailHealthController;
use App\Http\Controllers\Api\Admin\EmailTemplate\EmailTemplateController;
@@ -27,6 +28,14 @@ Route::prefix('settings')
Route::post('test-smtp', 'testSmtp')->middleware('throttle:10,1');
});
Route::prefix('login-blocks')
->controller(AdminLoginBlockController::class)
->middleware('perm:setting.manager')
->group(function () {
Route::get('/', 'index');
Route::delete('{id}', 'destroy')->whereNumber('id');
});
Route::prefix('client-menu')
->controller(ClientMenuController::class)
->middleware('perm:setting.manager')