lock accounts after enough failed login attempts

schema-migration/000-init.sql

@@ -19,6 +19,8 @@ CREATE TABLE arimelody.account (
     email TEXT,
     avatar_url TEXT,
     created_at TIMESTAMP NOT NULL DEFAULT current_timestamp
+    fail_attempts INT NOT NULL DEFAULT 0,
+    locked BOOLEAN DEFAULT false,
 );
 ALTER TABLE arimelody.account ADD CONSTRAINT account_pk PRIMARY KEY (id);
 

schema-migration/003-fail-lock.sql

@@ -0,0 +1,3 @@
+-- it would be nice to prevent brute-forcing
+ALTER TABLE arimelody.account ADD COLUMN fail_attempts INT NOT NULL DEFAULT 0;
+ALTER TABLE arimelody.account ADD COLUMN locked BOOLEAN DEFAULT false;