mirror of
https://github.com/documenso/documenso
synced 2026-04-21 13:27:18 +00:00
653ab3678a
Replace hono-rate-limiter with a Prisma/PostgreSQL bucketed counter approach that works correctly across multiple instances without sticky sessions. - Add RateLimit model with composite PK (key, action, bucket) and atomic upsert - Create rate limit factory with window parsing, bucket computation, and fail-open - Define auth-tier and API-tier rate limit instances - Add Hono middleware, rateLimitResponse helper, and tRPC assertRateLimit helper - Wire rate limit headers through AppError constructor (was declared but never assigned) - Apply rate limits to auth routes (email-password, passkey), tRPC routes (2FA email, link org account), API routes, and file upload endpoints - Add cleanup cron job for expired rate limit rows (batched delete every 15 min) - Remove hono-rate-limiter dependency |
||
|---|---|---|
| .. | ||
| ci.yml | ||
| codeql-analysis.yml | ||
| deploy.yml | ||
| e2e-tests.yml | ||
| first-interaction.yml | ||
| issue-assignee-check.yml | ||
| issue-labeler.yml | ||
| issue-opened.yml | ||
| pr-labeler.yml | ||
| pr-review-reminder.yml | ||
| publish.yml | ||
| semantic-pull-requests.yml | ||
| stale.yml | ||
| translations-force-pull.yml | ||
| translations-pull.yml | ||
| translations-upload.yml | ||