feat: add login attempt counter

[smarcet]

Change-Id: Icd5ceb7f886ffa918449c872047ce4f279ee9c81
ref https://tipit.avaza.com/project/view/376250#!tab=task-pane&task=3818781

[Copilot]

Pull Request Overview

This PR introduces a login attempt counter, exposes related session variables to the frontend, and updates backend logic to track and reset failed attempts.

• Add max_login_failed_attempts and user_is_active session values in the login view
• Enhance React form to display dynamic error messages based on login attempt counts and lock status
• Persist and reset login_failed_attempt in the user model and propagate values via the controller

Reviewed Changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
resources/views/auth/login.blade.php	Inject new session variables (maxLoginFailedAttempts, user_is_active) into JS config
resources/js/login/login.js	Use loginAttempts, maxLoginFailedAttempts, and userIsActive to conditionally render errors
app/libs/Auth/Models/User.php	Initialize login_failed_attempt in activate() and verifyEmail()
app/libs/Auth/Factories/UserFactory.php	Remove unused import
app/Services/SecurityPolicies/LockUserCounterMeasure.php	Simplify null check on $user
app/Http/Controllers/UserController.php	Expose new config values (max_login_failed_attempts, user_is_active) in JSON responses

Comments suppressed due to low confidence (4)

resources/views/auth/login.blade.php:70

• The config property uses snake_case (user_is_active) while other properties use camelCase. Rename to userIsActive for consistency with the rest of the JS config.

            config.user_is_active = {{Session::get("user_is_active")}};

app/Http/Controllers/UserController.php:513

• The value for user_verified is sometimes a boolean (true) and sometimes an integer (1). For consistency and clearer API design, use a boolean in all cases.

                $response_data['user_verified'] = 1;

app/libs/Auth/Models/User.php:1857

• Setting login_failed_attempt to 10 in activate() may immediately lock the user again. Verify whether this should be reset to 0 instead to fully clear prior failures.

            $this->login_failed_attempt = 10;

resources/js/login/login.js:819

• Server response keys are snake_case (login_attempts, max_login_failed_attempts) but props are accessed as camelCase. This mismatch may cause undefined values; ensure prop names align with the data shape (either rename server keys or adjust prop accessors).

                                    loginAttempts={this.props?.loginAttempts}

[romanetar]

@smarcet please review comments

[romanetar]

Please extract this to a constant

[romanetar]

LGTM