Skip to content

Say sign-in is limited when lockout is left out - #173

Merged
raghubetina merged 1 commit into
mainfrom
sign-in-limit-text
Oct 12, 2026
Merged

raghubetina merged 1 commit into
mainfrom
sign-in-limit-text

Conversation

@raghubetina

@raghubetina raghubetina commented Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

The service release that plugin 0.8.16 ships with gives an Account without lockout Rails' own sign-in limit (10 attempts per IP address every three minutes). The Skill's Accounts text in interview.md and foundation-plan-023.md said failed sign-ins were not limited; it now describes the limit and points at DEPLOY.md's Failed sign-ins section for the shared-network case. sh script/check --cli-root passes.

Docs: updated the Accounts text in interview.md and foundation-plan-023.md and the 0.8.16 CHANGELOG entry.

Review: Codex (codex-review, high effort), approve, 0 findings.

The service release this plugin ships with gives an Account without
lockout Rails' own sign-in rate limit (firstdraft/firstdraft#1147), so
the Skill's Accounts text no longer says failed sign-ins are unlimited.
It points at DEPLOY.md's Failed sign-ins section, because a classroom
on one network shares the per-IP limit.
@raghubetina
raghubetina merged commit bb8ce6b into main Oct 12, 2026
3 checks passed
@raghubetina
raghubetina deleted the sign-in-limit-text branch October 12, 2026 17:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant