fix(security): harden public auth rate limits (#6997)

* fix(security): harden public auth rate limits

* fix(security): fail closed without client IP

* fix(security): backstop public OTP requests

* fix(security): preserve independent rate-limit backstops
This commit is contained in:
Theodore Li
2026-08-22 21:51:58 -04:00
committed by GitHub
parent 81ff24a2fc
commit bbf408bf30
48 changed files with 1008 additions and 184 deletions
+1 -1
View File
@@ -3518,7 +3518,7 @@
"password": {
"description": "Password for a password-gated share. Kept when omitted; enabling `password` with neither a supplied nor a stored password is a 400.",
"type": "string",
"minLength": 1,
"minLength": 15,
"maxLength": 1024
},
"allowedEmails": {