Barcode Betty c03e599ae3 feat: Redis-backed rate limiting with stricter auth limits ...

- Add rate_limit_auth_requests (5/min) and rate_limit_auth_window_seconds (60) settings
- Add rate_limit_redis_enabled flag for opt-in Redis usage
- Refactor _SlidingWindowCounter into InMemorySlidingWindow class
- Add RedisSlidingWindow using sorted sets with fallback to in-memory
- Add third _auth_strict_limiter for POST /auth/* paths (5 req/min)
- Add protocol-based backend selection at module load time
- Update tests for auth strict limiter and Redis fallback behavior

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-15 02:10:02 +00:00

..

.github/workflows

fix(api): revert auth/type regressions from standalone sync, keep email-in feature only

2026-04-03 09:40:39 +00:00

alembic

fix(api): create domain tables migration + fix create_all commit

2026-04-04 21:22:24 +00:00

src/cartsnitch_api

feat: Redis-backed rate limiting with stricter auth limits

2026-04-15 02:10:02 +00:00

tests

feat: Redis-backed rate limiting with stricter auth limits

2026-04-15 02:10:02 +00:00

.dockerignore

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

.gitignore

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

alembic.ini

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

CLAUDE.md

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

Dockerfile

fix(api): make alembic migrations idempotent for fresh databases

2026-04-04 16:28:29 +00:00

pyproject.toml

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00

renovate.json

feat: merge cartsnitch/api into api/ subdirectory

2026-03-28 02:24:02 +00:00