Skip to content

Feature/rate limit login - #64

Open
cchwala wants to merge 1 commit into
mainfrom
feature/rate-limit-login
Open

Feature/rate limit login#64
cchwala wants to merge 1 commit into
mainfrom
feature/rate-limit-login

Conversation

@cchwala

@cchwala cchwala commented Jul 30, 2026

Copy link
Copy Markdown
Member

No description provided.

@codecov

codecov Bot commented Jul 30, 2026

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 71.93878% with 55 lines in your changes missing coverage. Please review.
✅ Project coverage is 87.36%. Comparing base (ff803fd) to head (52b47f0).
⚠️ Report is 1 commits behind head on main.

Files with missing lines Patch % Lines
parser/backfill_stats_history.py 0.00% 34 Missing ⚠️
parser/db_writer.py 66.03% 18 Missing ⚠️
parser/entrypoints/sftp_push.py 82.35% 3 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main      #64      +/-   ##
==========================================
+ Coverage   86.10%   87.36%   +1.25%     
==========================================
  Files          39       39              
  Lines        3418     3078     -340     
==========================================
- Hits         2943     2689     -254     
+ Misses        475      389      -86     
Flag Coverage Δ
mno_simulator 86.12% <ø> (ø)
parser 90.14% <71.93%> (-1.86%) ⬇️
scripts 74.21% <ø> (ø)
webserver ?

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

…acks

- Add Flask-Limiter dependency for rate limiting
- Limit login endpoint to 5 requests/minute (prevents credential stuffing)
- Limit file upload to 10 requests/minute (prevents upload flooding)
- Limit file listing to 30 requests/minute (prevents enumeration)
- Add 429 error handler with JSON response
- Support memory storage by default, configurable via RATE_LIMIT_STORAGE_URI env var

Security impact: Mitigates brute-force attacks on login and resource exhaustion via API endpoints.
@cchwala
cchwala force-pushed the feature/rate-limit-login branch from 52b47f0 to b3f2eaf Compare July 30, 2026 09:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant