Paperclip 26f3415eab feat: Redis-backed rate limiting with stricter auth limits ...

- Add rate_limit_auth_requests (5/min) and rate_limit_auth_window_seconds (60)
  settings to config.py
- Refactor rate_limit.py to use protocol/ABC pattern with InMemorySlidingWindow
  and RedisSlidingWindow implementations
- Add RedisSlidingWindow using sorted sets for distributed rate limiting
- Add auth_strict_limiter for /auth/* POST endpoints (5 req/min per IP)
- Fall back to in-memory when Redis is unavailable
- Update tests to cover new functionality

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-14 15:46:52 +00:00

..

test_auth

fix(auth): parse compound Better-Auth cookie/bearer token to extract token part

2026-04-04 20:32:43 +00:00

test_e2e

fix: correct email-in-address format, remove dead code, update tests (#110)

2026-04-03 13:34:21 +00:00

test_middleware

feat: Redis-backed rate limiting with stricter auth limits

2026-04-14 15:46:52 +00:00

test_routes

fix(api): revert auth/type regressions from standalone sync, keep email-in feature only

2026-04-03 09:40:39 +00:00

test_services

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

__init__.py

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

conftest.py

fix: remove hardcoded default secrets from API config

2026-04-14 11:11:23 +00:00

test_config.py

fix(api): accept DATABASE_URL as fallback for shared DB with auth service

2026-04-04 19:52:24 +00:00

test_encrypted_json.py

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

test_models.py

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

test_openapi.py

fix(api): revert auth/type regressions from standalone sync, keep email-in feature only

2026-04-03 09:40:39 +00:00