From 2c812fc4f639a15aa5f29e81564e8b54755de6e0 Mon Sep 17 00:00:00 2001
From: spinline <bilal.karatatr.@gmail.com>
Date: Sun, 8 Feb 2026 15:56:07 +0300
Subject: [PATCH] =?UTF-8?q?fix:=20login=20rate=20limit=205=20deneme=20ve?=
 =?UTF-8?q?=201=20dakika=20bekleme=20olarak=20g=C3=BCncellendi?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 backend/src/rate_limit.rs | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/backend/src/rate_limit.rs b/backend/src/rate_limit.rs
index 56ae822..39be523 100644
--- a/backend/src/rate_limit.rs
+++ b/backend/src/rate_limit.rs
@@ -5,13 +5,12 @@ use tower_governor::governor::GovernorConfigBuilder;
 use tower_governor::key_extractor::SmartIpKeyExtractor;
 
 pub fn get_login_rate_limit_config() -> GovernorConfig<SmartIpKeyExtractor, NoOpMiddleware<QuantaInstant>> {
-    // Katı limitler:
-    // Başlangıçta 3 hak. 4. denemede bloklanır.
-    // Her yeni hak için 20 saniye bekleme süresi.
+    // 5 yanlış denemeden sonra bloklanır.
+    // Her yeni hak için 60 saniye (1 dakika) bekleme süresi.
     GovernorConfigBuilder::default()
         .key_extractor(SmartIpKeyExtractor)
-        .per_second(20) 
-        .burst_size(3)
+        .per_second(60) 
+        .burst_size(5)
         .finish()
         .unwrap()
-}
\ No newline at end of file
+}