Rate Limiter for login attempts

[simongroenewolt]

I think Bolt doesn't have any form of protection against brute-force password guessing attempts.

Symfony has recently added a Rate Limiter component symfony/rate-limiter that is usable from version 5.2 and currently rated 'experimental'. It enables protecting logins as well: https://symfony.com/blog/new-in-symfony-5-2-login-throttling

I think it makes sense to add this component by default to Bolt to protect users.

[bobdenotter]

Cool, didn't know about that! 👍