//! Middleware modules

// Task 4: in-memory per-IP rate limiting + brute-force lockout. The v1
// tower_governor-based limiter never compiled; this is a small self-contained
// replacement. See rate_limit.rs.
pub mod rate_limit;

pub use rate_limit::{
    change_password_rate_limit, code_validate_rate_limit, login_rate_limit, RateLimitState,
};

// SEC-7 & SEC-12: Security headers middleware
pub mod security_headers;

pub use security_headers::add_security_headers;
