Hugh Brown ce18fe4f0c fix: apply rate limiting to optional agent auth path ...

get_agent_auth_context_optional was not rate-limited, allowing
brute-force token guessing via routes that use require_user_or_agent.
Now applies agent_auth_limiter when a token is actually presented.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-07 23:35:10 +05:30

..

api

Apply ruff fixes

2026-03-07 23:35:10 +05:30

core

fix: apply rate limiting to optional agent auth path

2026-03-07 23:35:10 +05:30

db

refactor: reorganize imports and improve code formatting for readability

2026-02-15 13:20:46 +05:30

models

security: add HMAC signature verification to webhook ingest

2026-03-07 23:35:10 +05:30

schemas

fix: use Annotated+BeforeValidator for webhook secret normalization

2026-03-07 23:35:10 +05:30

services

chore: simplify and harden security review changes

2026-03-07 23:35:10 +05:30

__init__.py

refactor: update module docstrings for clarity and consistency

2026-02-09 15:49:50 +05:30

main.py

fix: make security headers configurable and add tests

2026-02-24 17:36:44 +01:00