mirror of
https://github.com/getAlby/hub.git
synced 2026-08-13 12:33:39 +02:00
The unlock endpoints were rate limited per client IP, which is derived from request headers and so is chosen by the caller. Switch to a single global rate limiter (one bucket for all callers) and apply it to every endpoint that verifies the unlock password: start, unlock, backup, mnemonic, apps, autoswap, unlock-password and auto-unlock. A small burst keeps unlocking and immediately performing an action working. Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| alby_http_service.go | ||
| http_service.go | ||
| http_service_test.go | ||
| models.go | ||