Watch
1
0
Fork
You've already forked RedFlag
0
RedFlag/server/internal/api/middleware
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Fimeg 6c3461cdf9 feat: rate limiter startup grace penalty (SEC-004)
The limiter is in-memory; a restart clears all counters, so an attacker
who can force one gets a fresh budget. For 60s after boot every limit
runs at half its configured budget (min 1), making a restart strictly
worse for the attacker while per-key limits keep reconnecting agents
comfortable. Restart semantics documented in OPERATIONS.md §6.
2026-06-11 04:29:50 -04:00
..
audit.go feat: unified event timeline, desktop bundling, UI primitives 2026-06-08 19:09:58 -04:00
auth.go swap uuid lib, windows installer pass, README/RAF copy 2026-06-03 15:39:49 -04:00
auth_secret_leak_test.go refactor: rename aggregator-agent to agent for public release 2026-05-21 13:19:18 -04:00
cors.go refactor: rename aggregator-agent to agent for public release 2026-05-21 13:19:18 -04:00
db_pool_shed.go shed agent writes when the db pool runs dry 2026-06-07 21:16:53 -04:00
db_pool_shed_test.go shed agent writes when the db pool runs dry 2026-06-07 21:16:53 -04:00
ethos_emoji_test.go refactor: rename aggregator-agent to agent for public release 2026-05-21 13:19:18 -04:00
machine_binding.go swap uuid lib, windows installer pass, README/RAF copy 2026-06-03 15:39:49 -04:00
machine_id_recovery_test.go refactor: rename aggregator-agent to agent for public release 2026-05-21 13:19:18 -04:00
metrics_auth.go give the system a window you can scrape, and patch a migration that couldn't run twice 2026-06-07 20:59:29 -04:00
metrics_auth_test.go give the system a window you can scrape, and patch a migration that couldn't run twice 2026-06-07 20:59:29 -04:00
rate_limiter.go feat: rate limiter startup grace penalty (SEC-004) 2026-06-11 04:29:50 -04:00
rate_limiter_grace_test.go feat: rate limiter startup grace penalty (SEC-004) 2026-06-11 04:29:50 -04:00
require_admin.go refactor: rename aggregator-agent to agent for public release 2026-05-21 13:19:18 -04:00
require_admin_behavior_test.go refactor: rename aggregator-agent to agent for public release 2026-05-21 13:19:18 -04:00
require_admin_test.go refactor: rename aggregator-agent to agent for public release 2026-05-21 13:19:18 -04:00
scheduler_auth_test.go swap uuid lib, windows installer pass, README/RAF copy 2026-06-03 15:39:49 -04:00
token_confusion_test.go swap uuid lib, windows installer pass, README/RAF copy 2026-06-03 15:39:49 -04:00