Method allow

src/server/web/auth.ts:34–49

* Returns true if the connection should be allowed.

(ip: string)

   * Returns true if the connection should be allowed.
   */
  allow(ip: string): boolean {
    const now = Date.now();
    const timestamps = this.attempts.get(ip) ?? [];

    // Prune old entries
    const recent = timestamps.filter((t) => now - t < this.windowMs);

    if (recent.length >= this.maxPerWindow) {
      this.attempts.set(ip, recent);
      return false;
    }

    recent.push(now);
    this.attempts.set(ip, recent);
    return true;
  }

  /**
   * Periodically clean up stale entries.