How many wrong tokens one client may present before it is refused without an object hop.
Guessing the token is not the threat (32 CSPRNG bytes, constant-time compare); the unbounded cost
is: each presented token costs a /__ownercheck object request, the meter the free plan is
scored against. 12 rather than 3 so a stale cookie in an open tab does not lock its owner out.
How many wrong tokens one client may present before it is refused without an object hop.
Guessing the token is not the threat (32 CSPRNG bytes, constant-time compare); the unbounded cost is: each presented token costs a
/__ownercheckobject request, the meter the free plan is scored against. 12 rather than 3 so a stale cookie in an open tab does not lock its owner out.