- Implement proper token validation via user_token table (SHA256+base64 hash) - Query token_hash, check IsRevoked, validate expiry - Remove IP-based rate limiting (handled by k8s ingress) - Remove unused client_ip() helper function - user_uid() now async and queries database for real user |
||
|---|---|---|
| .. | ||
| archive | ||
| blame | ||
| blob | ||
| branch | ||
| commit | ||
| config | ||
| description | ||
| diff | ||
| hook | ||
| http | ||
| lfs | ||
| merge | ||
| reference | ||
| ssh | ||
| tags | ||
| tree | ||
| Cargo.toml | ||
| domain.rs | ||
| error.rs | ||
| lib.rs | ||
| ref_utils.rs | ||