- Implement proper token validation via user_token table (SHA256+base64 hash) - Query token_hash, check IsRevoked, validate expiry - Remove IP-based rate limiting (handled by k8s ingress) - Remove unused client_ip() helper function - user_uid() now async and queries database for real user |
||
|---|---|---|
| .. | ||
| agent | ||
| agent-tool-derive | ||
| api | ||
| avatar | ||
| config | ||
| db | ||
| fctool | ||
| frontend | ||
| git | ||
| migrate | ||
| models | ||
| observability | ||
| queue | ||
| room | ||
| rpc | ||
| service | ||
| session | ||
| session_manager | ||
| transport | ||
| webhook | ||