Feat add iam auth

apps/api/src/modules/auth/auth.controller.ts

@@ -1,4 +1,4 @@
-import { Body, Controller, Get, HttpCode, Post } from '@nestjs/common';
+import { Body, Controller, Get, Headers, HttpCode, Ip, Post } from '@nestjs/common';
 import { AuthService } from './auth.service';
 import { LoginDto } from './dto/login.dto';
 import { CurrentAdmin, Public } from './guards';
@@ -19,8 +19,11 @@ export class AuthController {
   @Public()
   @Post('login')
   @HttpCode(200)
-  login(@Body() dto: LoginDto) {
-    return this.authService.login(dto);
+  login(@Body() dto: LoginDto, @Ip() ip: string, @Headers('user-agent') userAgent?: string) {
+    // The IP is forwarded to the identity service (when delegation is on) so its
+    // per-IP rate limit applies to the real admin, not to this API server; both
+    // are also recorded on the session row when session tracking is on.
+    return this.authService.login(dto, ip, userAgent);
   }
 
   /** Legacy `users/show` — the router guard's permission refresh. */