upaas

65 Commits 27 Branches 2 Tags

3 Commits

Author	SHA1	Message	Date
user	e42f80814c	fix: address noinlineerr lint warning	2026-02-15 21:43:00 -08:00
user	97a5aae2f7	simplify: replace mutex + ON CONFLICT with a single DB transaction Remove the sync.Mutex and CreateUserAtomic (INSERT ON CONFLICT) in favor of a single DB transaction in CreateFirstUser that atomically checks for existing users and inserts. SQLite serializes write transactions, so this is sufficient to prevent the race condition without application-level locking.	2026-02-15 21:41:52 -08:00
user	a1b06219e7	fix: add eviction for stale IP rate limiter entries and Retry-After header - Store lastSeen timestamp per IP limiter entry - Lazy sweep removes entries older than 10 minutes on each request - Add Retry-After header to 429 responses - Add test for stale entry eviction Fixes memory leak under sustained attack from many IPs.	2026-02-15 21:01:11 -08:00

Author

SHA1

Message

Date

user

e42f80814c

fix: address noinlineerr lint warning

2026-02-15 21:43:00 -08:00

user

97a5aae2f7

simplify: replace mutex + ON CONFLICT with a single DB transaction

Remove the sync.Mutex and CreateUserAtomic (INSERT ON CONFLICT) in favor
of a single DB transaction in CreateFirstUser that atomically checks for
existing users and inserts. SQLite serializes write transactions, so this
is sufficient to prevent the race condition without application-level locking.

2026-02-15 21:41:52 -08:00

user

a1b06219e7

fix: add eviction for stale IP rate limiter entries and Retry-After header

- Store lastSeen timestamp per IP limiter entry
- Lazy sweep removes entries older than 10 minutes on each request
- Add Retry-After header to 429 responses
- Add test for stale entry eviction

Fixes memory leak under sustained attack from many IPs.

2026-02-15 21:01:11 -08:00