- Store lastSeen timestamp per IP limiter entry - Lazy sweep removes entries older than 10 minutes on each request - Add Retry-After header to 429 responses - Add test for stale entry eviction Fixes memory leak under sustained attack from many IPs. |
||
|---|---|---|
| .. | ||
| middleware.go | ||
| ratelimit_test.go | ||