| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2026-02-16 | test(backend): add unit tests for auth, config, ratelimit, game, and api | nsfisis | |
| Cover previously untested logic: session ID generation/hashing, password authentication, IP rate limiting, game state helpers, handler endpoints, task enqueue/result processing, and config loading. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> | |||
| 2026-02-13 | feat(auth): add login rate limiting per IP | nsfisis | |
| Prevent brute-force attacks by limiting POST /login to 5 requests per minute per IP address using golang.org/x/time/rate. Unused entries are cleaned up after 10 minutes of inactivity. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> | |||
