upaas/internal/middleware
user a1b06219e7 fix: add eviction for stale IP rate limiter entries and Retry-After header
- Store lastSeen timestamp per IP limiter entry
- Lazy sweep removes entries older than 10 minutes on each request
- Add Retry-After header to 429 responses
- Add test for stale entry eviction

Fixes memory leak under sustained attack from many IPs.
2026-02-15 21:01:11 -08:00
..
middleware.go fix: add eviction for stale IP rate limiter entries and Retry-After header 2026-02-15 21:01:11 -08:00
ratelimit_test.go fix: add eviction for stale IP rate limiter entries and Retry-After header 2026-02-15 21:01:11 -08:00