feat: enhanced authentication by adding

[AnishSarkar22]

Description

• Enhanced user authentication by adding specific error handling for non-existent accounts.
• Implemented rate limiting for authentication endpoints and enhance error handling for login attempts.

Motivation and Context

FIX #

Screenshots

API Changes

• This PR includes API changes

Change Type

• Bug fix
• New feature
• Performance improvement
• Refactoring
• Documentation
• Dependency/Build system
• Breaking change
• Other (specify):

Testing Performed

• Tested locally
• Manual/QA verification

Checklist

• Follows project coding standards and conventions
• Documentation updated as needed
• Dependencies updated as needed
• No lint/build errors or new warnings
• All relevant tests are passing

High-level PR Summary

This PR enhances the authentication security by implementing rate limiting on authentication endpoints (login, registration, and password reset) to prevent brute force attacks and user enumeration. It introduces specific error handling to distinguish between non-existent accounts (LOGIN_USER_NOT_FOUND) and incorrect passwords, uses Redis-backed rate limiting with SlowAPI middleware, and updates the frontend to handle the new error codes. The changes also improve logging for security monitoring and remove redundant toast notifications from the login form.

⏱️ Estimated Review Time: 30-90 minutes

💡 Review Order Suggestion

Order	File Path
1	surfsense_backend/pyproject.toml
2	surfsense_backend/uv.lock
3	surfsense_web/lib/auth-errors.ts
4	surfsense_backend/app/users.py
5	surfsense_web/app/(home)/login/LocalLoginForm.tsx
6	surfsense_backend/app/app.py

[vercel]

@AnishSarkar22 is attempting to deploy a commit to the Rohan Verma's projects Team on Vercel.

A member of the Team first needs to authorize it.

[recurseml]

Review by RecurseML

🔍 Review performed on 20a13df..79f004b

✨ No bugs found, your code is sparkling clean

✅ Files analyzed, no issues (4)

• surfsense_backend/app/app.py
• surfsense_backend/pyproject.toml
• surfsense_web/app/(home)/login/LocalLoginForm.tsx
• surfsense_web/lib/auth-errors.ts

⏭️ Files skipped (1)

Locations
surfsense_backend/uv.lock

[recurseml]

Review by RecurseML

🔍 Review performed on 79f004b..bcdfd23

✨ No bugs found, your code is sparkling clean

✅ Files analyzed, no issues (4)

• surfsense_backend/app/users.py
• surfsense_web/app/(home)/login/LocalLoginForm.tsx
• surfsense_web/app/dashboard/[search_space_id]/documents/(manage)/components/RowActions.tsx
• surfsense_web/lib/auth-errors.ts