feature request: Is it possible to set rate limitation on user login?

[weathon]

So that we can block possible brute force password cracking

[gao-sun]

For Logto Cloud we've setup firewalls. For Logto OSS we do have a plan on enhanced security on 23H2.

[Tc-001]

This will be at least somewhat solved with #1751 (depending on the implementation) For now you could set up your own limiting rules with the reverse proxy of your choice

[gao-sun]

We are implementing a default rate limiter. Customization may come later.