Skip to content

v0.3.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Jul 13:32
v0.3.0
d46eb80
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • Per-IP rate limiting on the token introspection (RFC 7662) and revocation
    (RFC 7009) endpoints.     Both are credential-guessable; the throttle runs
    before client authentication (30/15min by IP, override with
    RATE_LIMIT_INTROSPECT_PER_IP / RATE_LIMIT_REVOKE_PER_IP). Reuses the
    standard_id engine's rate-limit store and JSON 429 handler.
Assets 2
Loading