web login over SSH applies the login-link limit !488

merged merged by cmc on 2026-09-28 21:49 UTC · krz/gitbay:weblogin-limit into main

Discussion

cmc

web login over SSH spends the login-link budget.

runWebLogin counts the account's login links in the last hour and refuses (exit 4) at maxLoginLinksPerHour, the same five-per-hour budget the web form uses; nothing is minted over the limit.
The comment in loginlink.go that said the SSH path skipped the bound is corrected.
#278 leaves Known-Gaps; CHANGELOG.

Stacked on !487 (session-idle). Last MR of the credentials stack.

Closes #278