1
Fork 0
mirror of https://github.com/thegeneralist01/archivr synced 2026-07-21 18:55:36 +02:00
archivr/crates/archivr-server/src
TheGeneralist a8e52bdf71
security: add per-IP sliding-window rate limit on POST /api/auth/login
5 attempts / 15 min per IP. Excess attempts get 429 + Retry-After.
Client IP read from X-Forwarded-For with loopback fallback.
In-memory; prune inline on each check.
Refactored app() into app_with_state() + thin wrapper.
Uses parking_lot::Mutex (no unwrap, no poisoning).
2026-06-29 20:06:41 +02:00
..
auth.rs feat(auth): AuthUser extractor, password helpers, token generation 2026-06-26 11:50:29 +02:00
main.rs feat(capture): mark stalled running jobs failed on server startup 2026-06-26 12:57:59 +02:00
registry.rs feat(auth): add auth_db_path to AppState, registry, and main.rs 2026-06-26 11:46:23 +02:00
routes.rs security: add per-IP sliding-window rate limit on POST /api/auth/login 2026-06-29 20:06:41 +02:00