shinchan-zhai
|
f28f0e340c
|
security: login rate limiting, fix health endpoint, harden error handling
- Fix health endpoint returning null time (use time.Now() instead of context value)
- Add LoginRateLimiter: 5 attempts per 15min window, 5min block on brute-force
- Apply rate limiting to login/register endpoints
- Move reset-password to authenticated routes (was unauthenticated — critical vuln)
- Limit response body sizes on proxy/external API calls (prevent memory exhaustion)
- Sanitize error messages in agent chat endpoint (don't leak internal errors)
- Record login success/failure for rate limiting tracking
|
2026-03-25 01:05:54 +08:00 |
|
tinkle-community
|
8e294a5eed
|
refactor: restructure project directories for better modularity
- Delete llm/ dead code (3 files, zero references)
- Split mcp/ into sub-packages: mcp/provider/ (8 providers) and
mcp/payment/ (4 payment clients) with registry pattern
- Export Client internal fields and ClientHooks interface for
sub-package access
- Split api/server.go (3892 lines) into 8 domain-specific handler files
- Split trader/auto_trader.go (2296 lines) into 5 focused files
- Reorganize web/src/components/ flat files into auth/, charts/,
trader/, common/, modals/, backtest/ subdirectories
- Update all consumer imports to use registry-based provider creation
|
2026-03-11 23:58:13 +08:00 |
|