fsylvain 0e050c36ff fix: rate limiting X-Real-IP from the real peer

2026-09-25 06:49:55 +02:00

..

auth.go

fix: resetting the password or cancelling a registration ends existing sessions: a token issued before the change is refused

2026-09-25 05:03:34 +02:00

rateLimit.go

fix: login and password reset requests are rate-limited per client (not in the README; there is currently no brute-force protection on the public auth routes)

2026-09-25 05:33:02 +02:00

trustedProxyRealIP.go

fix: rate limiting X-Real-IP from the real peer

2026-09-25 06:49:55 +02:00