jacobh2 96e4cbdf4e Server: APK download rate limit 10/min per IP (D-119) ...

E-6 (/apk/files/{file_name}) gets its own per-IP bucket of 10 requests per
minute (security review L-3), keyed like the 60/min unauthenticated limit
(peer or trusted-proxy X-Forwarded-For, D-032) and answered 429
rate_limited with Retry-After. E-6 no longer counts against the 60; E-5 and
E-4 stay on the 60/min limit.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TQd3pEP9UeN2uifbHknQ7B

2026-10-19 11:15:26 +02:00

..

migrations

M12e: contract pass (pair invite kind, admin name in invite links, sync failed flag, rejection actor, device version name, template id, update check result, untouched accounts, D-027 re-stamp, PushEvent in :core:model, snackbar hosts)

2026-10-18 15:00:56 +02:00

src

Server: APK download rate limit 10/min per IP (D-119)

2026-10-19 11:15:26 +02:00

tests

Server: APK download rate limit 10/min per IP (D-119)

2026-10-19 11:15:26 +02:00

Cargo.toml

Server overhaul: sync push delete step in its own function; clap env feature dropped

2026-10-18 22:43:54 +02:00