admin/Azaion.Common/Configs/AuthConfig.cs

namespace Azaion.Common.Configs;

public class AuthConfig
{
    public RateLimitOptions RateLimit { get; set; } = new();
    public LockoutOptions   Lockout   { get; set; } = new();
}

public class RateLimitOptions
{
    public int PerIpPermitLimit       { get; set; } = 10;
    public int PerIpWindowSeconds     { get; set; } = 60;
    public int PerAccountPermitLimit  { get; set; } = 5;
    public int PerAccountWindowSeconds { get; set; } = 300;
}

public class LockoutOptions
{
    public int MaxAttempts        { get; set; } = 10;
    public int DurationSeconds    { get; set; } = 900; // 15 min
}