*
     * @param username the username
     * @param sourceIp the source IP
     */
    public void recordFailure(String username, String sourceIp) {
        if (username != null) {
            AccountAttempts account = accountAttempts.computeIfAbsent(username, k -> new AccountAttempts());
            account.recordFailure();

            if (account.getFailedAttempts() >= maxAttemptsPerAccount) {

        public synchronized void recordSuccess(long responseTimeMs) {
            getCurrentBucket().recordSuccess(responseTimeMs);
        }

        public synchronized void recordFailure() {
            getCurrentBucket().recordFailure();
        }

        public synchronized WindowMetrics getMetrics() {
            long now = System.currentTimeMillis();

        consecutiveFailures.computeIfAbsent(key, k -> new AtomicInteger(0)).incrementAndGet();

        ConnectionMetrics metrics = connectionMetrics.get(key);
        if (metrics != null) {
            metrics.recordFailure();
        }
    }

    /**
     * Record connection success for recovery tracking
     */
    private void recordConnectionSuccess(String key) {
        consecutiveFailures.remove(key);

        assertTrue(rateLimiter.checkAttempt(username, ip));
        rateLimiter.recordFailure(username, ip);

        assertTrue(rateLimiter.checkAttempt(username, ip));
        rateLimiter.recordFailure(username, ip);

        assertTrue(rateLimiter.checkAttempt(username, ip));
        rateLimiter.recordFailure(username, ip);

        // After 3 failures, account should be locked
        try {