sneak/pixa
1
0
Fork 0
Code Issues 31 Pull Requests 4 Actions 3 Packages Projects Releases Wiki Activity
189 Commits 11 Branches 0 Tags
39051ee4a358a4696d2d49b096aa8f848cc76d2f
Commit Graph
2 Commits
Author SHA1 Message Date
clawbot 39051ee4a3 Test that IPv4-mapped login clients are counted apart (closes #66)
check / check (push) Failing after 1m51s
Details 
Two IPv4 clients that the trusted proxy forwards in IPv4-mapped form must
not share one login count. Fails: both fall in the same /64.

Model: opus-5-5
 2026-09-28 22:48:12 +00:00
clawbot 1a50dd20d9 Test that login attempts are rate limited per client (closes #66)
check / check (push) Failing after 40s
Details 
The tests build the server's real routes and log in as a browser does.
The attempt after LoginAttemptsPerMinute failed logins from one client
must get 429 with Retry-After; another client must still get the login
form and log in with the signing key; two clients behind a trusted proxy
must be counted separately; X-Forwarded-For from an untrusted peer must
not get around the limit; an IPv6 client must be counted by its /64.

They do not compile yet: LoginAttemptsPerMinute comes with the change.

Model: opus-5-5
 2026-09-28 21:11:42 +00:00