lekss361 747a325428 fix(tradein): bypass rate-limit for authenticated pilots + configurable limit (#655) ... Results page hits ~8-10 /api/* endpoints per estimate, tripping the per-IP rate-limit (was 90/60s) and 429'ing trusted pilots behind Caddy basic_auth. Requests carrying X-Authenticated-User (injected by Caddy) now bypass the limiter; anonymous traffic stays throttled. Limit/window are env-configurable (RATE_LIMIT default 90->300, RATE_LIMIT_WINDOW_S=60). Closes #655		2026-05-29 18:30:53 +03:00
..
app	fix(tradein): bypass rate-limit for authenticated pilots + configurable limit (#655)	2026-05-29 18:30:53 +03:00
data/sql	feat(tradein): daily asking→sold ratio refresh (#648 S4) (#663)	2026-05-29 13:49:36 +00:00
scripts	feat(backtest): per-rooms asking→sold correction block (#648 S1) (#650)	2026-05-29 13:11:55 +00:00
tests	fix(tradein): bypass rate-limit for authenticated pilots + configurable limit (#655)	2026-05-29 18:30:53 +03:00
.dockerignore	feat: add tradein-mvp subproject (Trade-In Estimator под /trade-in)	2026-05-21 00:25:39 +03:00
Dockerfile	feat(tradein): persistent infra для backfill scripts (PR F) (#592)	2026-05-27 06:59:54 +00:00
pyproject.toml	feat(rbac): role-based access control via X-Authenticated-User middleware (#585)	2026-05-26 06:18:40 +00:00