V16.1.0

✨ Enhancements

• Rate Limiting Improvements

  • Added a new addRateLimitHeaders function to standardize rate limit response headers across all endpoints.
  • Introduced a failClosed option for critical endpoints, ensuring that rate limiting errors default to secure denial instead of allowing requests through.
  • Improved consistency in rate limit handling and response formatting for multiple API routes.

• Security Enhancements

  • Strengthened CSRF token validation by implementing a timing-safe comparison mechanism to mitigate timing attacks.
  • Enhanced API response security with additional protective headers applied across key endpoints.

• Schema Optimization

  • Refactored the rate limit schema in Prisma to simplify tracking of users and endpoints, improving maintainability and query performance.