Struct sessionStore

apps/server/internal/httpserver/security.go:26–32

)

type sessionStore struct {
	mu       sync.Mutex
	sessions map[string]time.Time
	// path, when non-empty, persists sessions to disk so browser logins survive a
	// server restart (opt-in via ZENNOTES_PERSIST_SESSIONS).
	path string
}

type attemptLimiter struct {
	mu      sync.Mutex