- Implement proper token validation via user_token table (SHA256+base64 hash) - Query token_hash, check IsRevoked, validate expiry - Remove IP-based rate limiting (handled by k8s ingress) - Remove unused client_ip() helper function - user_uid() now async and queries database for real user |
||
|---|---|---|
| .. | ||
| auth.rs | ||
| handler.rs | ||
| lfs_routes.rs | ||
| lfs.rs | ||
| mod.rs | ||
| rate_limit.rs | ||
| routes.rs | ||
| utils.rs | ||