lekss361 747a325428 fix(tradein): bypass rate-limit for authenticated pilots + configurable limit (#655) ... Results page hits ~8-10 /api/* endpoints per estimate, tripping the per-IP rate-limit (was 90/60s) and 429'ing trusted pilots behind Caddy basic_auth. Requests carrying X-Authenticated-User (injected by Caddy) now bypass the limiter; anonymous traffic stays throttled. Limit/window are env-configurable (RATE_LIMIT default 90->300, RATE_LIMIT_WINDOW_S=60). Closes #655		2026-05-29 18:30:53 +03:00
..
__init__.py	feat: add tradein-mvp subproject (Trade-In Estimator под /trade-in)	2026-05-21 00:25:39 +03:00
auth.py	feat(rbac): role-based access control via X-Authenticated-User middleware (#585)	2026-05-26 06:18:40 +00:00
config.py	fix(tradein): bypass rate-limit for authenticated pilots + configurable limit (#655)	2026-05-29 18:30:53 +03:00
db.py	feat: add tradein-mvp subproject (Trade-In Estimator под /trade-in)	2026-05-21 00:25:39 +03:00
fdw.py	feat(tradein): postgres_fdw live read of gendesign.cad_buildings (replaces snapshot) (#493)	2026-05-24 08:57:30 +00:00
ratelimit.py	fix(tradein): bypass rate-limit for authenticated pilots + configurable limit (#655)	2026-05-29 18:30:53 +03:00