fix auth security issues

app/Http/Requests/Project/StoreRequest.php

@@ -51,12 +51,12 @@ public function rules(): array
             'preview' => ['file', 'nullable'],
         ];
     }
+
     public function messages()
     {
         return[
             'start.after_or_equal' => __('custom_validation.project.start.after_or_equal'),
             'end.after' => __('custom_validation.project.end.after'),
         ];
-
     }
 }

app/Http/Requests/RegistrationRequest.php

@@ -6,6 +6,7 @@
 
 use App\Rules\ValidCIF;
 use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rules\Password;
 
 class RegistrationRequest extends FormRequest
 {
@@ -23,7 +24,17 @@ public function rules(): array
             'user' => ['required', 'array'],
             'user.name' => ['required', 'string'],
             'user.email' => ['required', 'email', 'unique:users,email'],
-            'user.password' => ['required', 'string', 'confirmed'],
+            'user.password' => [
+                'required',
+                'string',
+                'confirmed',
+                Password::min(8)
+                    ->mixedCase()
+                    ->letters()
+                    ->numbers()
+                    ->symbols()
+                    ->uncompromised(),
+            ],
         ];
 
         if ($this->type === 'organization') {

app/Providers/RouteServiceProvider.php

@@ -45,6 +45,10 @@ protected function configureRateLimiting(): void
             return Limit::perMinute(config('throttle.register_limit'))->by($request->ip());
         });
 
+        RateLimiter::for('login', function (Request $request) {
+            return Limit::perMinute(config('throttle.login_limit'))->by($request->ip());
+        });
+
         RateLimiter::for('make-donation', function (Request $request) {
             return Limit::perMinute(config('throttle.donation_limit'))->by($request->user()?->id ?: $request->ip());
         });

config/filament-breezy.php

@@ -77,7 +77,7 @@
     |--------------------------------------------------------------------------
     | Enable or disable registration.
     */
-    'enable_registration' => true,
+    'enable_registration' => false,
     /*
     |--------------------------------------------------------------------------
     | Path to registration Livewire component.