Function backoffDelay

apps/server/internal/httpserver/security.go:188–201

backoffDelay returns the minimum time the caller must wait before the (consecutiveFailures+1)-th attempt is allowed: 0, 1, 2, 4, 8, 16, 32, then capped at 60s.

(consecutiveFailures int)

// (consecutiveFailures+1)-th attempt is allowed: 0, 1, 2, 4, 8, 16, 32,
// then capped at 60s.
func backoffDelay(consecutiveFailures int) time.Duration {
	if consecutiveFailures < 1 {
		return 0
	}
	n := consecutiveFailures - 1
	if n > 6 {
		n = 6
	}
	d := time.Duration(1<<n) * time.Second
	if d > 60*time.Second {
		d = 60 * time.Second
	}
	return d
}

func (l *attemptLimiter) reset(key string) {
	l.mu.Lock()