From 4fea063af9a2c4e2949e93ccf28ce876f9a33408 Mon Sep 17 00:00:00 2001 From: "LamTrinh.Dev" Date: Sun, 18 Oct 2026 01:04:05 +0700 Subject: [PATCH] fix: block after Max failed attempts, not Max+1 --- api/internal/utils/id_limiter.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/api/internal/utils/id_limiter.go b/api/internal/utils/id_limiter.go index b2b88f91..5b432673 100644 --- a/api/internal/utils/id_limiter.go +++ b/api/internal/utils/id_limiter.go @@ -40,7 +40,7 @@ func (l *IDLimiter) IsAllowed() bool { if err != nil { failedAttemptsInt = 0 } - if failedAttemptsInt > l.Max { + if failedAttemptsInt >= l.Max { return false }