feat: implement short-lived grant system for OTP verification and enhance rate limiting across authentication endpoints

2026-06-20 12:51:10 +03:30
parent f9678026a8
commit e2636ce743
11 changed files with 396 additions and 107 deletions
@@ -84,7 +84,7 @@ class PasswordAuthenticator extends AbstractAuthenticator
            'access_token'             => $accessToken,
            'refresh_token'            => $rawToken,
            'token_type'               => 'Bearer',
-            'expires_in'               => 3600,
+            'expires_in'               => 900,
            'refresh_token_expires_in' => $this->refreshTokenTtl,
        ]);
    }