MechaCat02 f2c9cfe162 test: cover the trusted_proxy X-Forwarded-For rate-limit gate ...

Two integration tests pinning both sides of the gate: trusted_proxy=true gives
each forwarded IP its own bucket; trusted_proxy=false ignores spoofed XFF and
shares the global bucket. Closes audit gap M7. Test-only, no behavior change.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-13 21:13:37 +02:00

..

common

test: cover the trusted_proxy X-Forwarded-For rate-limit gate

2026-07-13 21:13:37 +02:00

fixtures/target

bugfix: chapter source key uses chapter id, not /pg-1/ (0.23.1)

2026-05-22 23:15:36 +02:00

admin_metrics_series.rs

feat(admin): time-series trend charts on the metrics tabs (0.87.0)

2026-06-19 11:48:56 +02:00

analysis_ocr.rs

fix: enforce the analysis image cap while reading, not after

2026-07-07 21:10:29 +02:00

analysis_readiness.rs

feat(analysis): gate page leasing on a vision readiness probe

2026-06-14 14:57:48 +02:00

analysis_worker.rs

test(analysis): assert Cancelled event is published; correct cron-test rationale (0.87.21)

2026-06-23 20:46:08 +02:00

api_admin_analysis.rs

fix(admin): make force-reanalyze audit transactional; document storage exception

2026-07-01 07:16:08 +02:00

api_admin_audit.rs

feat(admin): audit-log viewer

2026-06-19 11:26:09 +02:00

api_admin_crawler.rs

fix(admin-security): close the bearer-cookie ride; require session for admin gate (0.87.10)

2026-06-22 22:28:16 +02:00

api_admin_health.rs

fix(admin-security): SSRF defence + CSRF fail-closed + analysis .no_proxy() (0.87.2)

2026-06-22 21:04:50 +02:00

api_admin_mangas.rs

fix(admin): security-audit findings — paginate chapters, lock down unchecked helper (0.41.2)

2026-05-30 22:23:55 +02:00

api_admin_overview.rs

feat(admin): overview dashboard sections + system temperature/load sensors (0.85.0) (#11)

2026-06-16 18:46:28 +00:00

api_admin_resync.rs

feat: cover retry backfill + admin force-resync for manga & chapter (0.50.0)

2026-06-01 22:00:09 +02:00

api_admin_role.rs

fix(tests): update api_admin_role AppState to post-0.80 fields

2026-06-14 16:01:09 +02:00

api_admin_settings.rs

fix(admin-security): SSRF defence + CSRF fail-closed + analysis .no_proxy() (0.87.2)

2026-06-22 21:04:50 +02:00

api_admin_storage.rs

refactor(clippy): fix the never-loop error and clear all lint warnings

2026-07-02 20:45:37 +02:00

api_admin_system.rs

feat(admin): overview dashboard sections + system temperature/load sensors (0.85.0) (#11)

2026-06-16 18:46:28 +00:00

api_admin_users.rs

fix: escape LIKE wildcards in user-search ILIKE queries

2026-07-13 19:57:06 +02:00

api_auth.rs

test: cover the trusted_proxy X-Forwarded-For rate-limit gate

2026-07-13 21:13:37 +02:00

api_authors.rs

fix: escape LIKE wildcards in user-search ILIKE queries

2026-07-13 19:57:06 +02:00

api_bookmarks.rs

fix: make bookmark add idempotent instead of 409

2026-07-11 14:08:27 +02:00

api_chapters.rs

fix: cap the multipart metadata part instead of buffering it unbounded

2026-07-13 20:10:05 +02:00

api_collection_pages.rs

feat(search): tag-based page search surface + per-page tags & collections

2026-06-13 15:51:38 +02:00

api_collections.rs

feat: manga collections (0.17.0)

2026-05-17 17:43:06 +02:00

api_files.rs

fix: force download for untyped (octet-stream) served blobs

2026-07-13 20:15:23 +02:00

api_genres.rs

feat: manga metadata with status, authors, genres, tags, and search filters (0.15.0)

2026-05-17 14:32:03 +02:00

api_history.rs

fix(home): keep finished series off the Continue-reading shelf

2026-07-04 21:52:58 +02:00

api_manga_warnings.rs

perf: denormalize content-warning filter to manga_content_warnings

2026-07-11 14:24:31 +02:00

api_mangas_cover.rs

feat: serve width-bounded thumbnail variants for image grids

2026-07-11 14:41:19 +02:00

api_mangas_metadata.rs

fix: cap the multipart metadata part instead of buffering it unbounded

2026-07-13 20:10:05 +02:00

api_mangas.rs

fix: escape LIKE wildcards in user-search ILIKE queries

2026-07-13 19:57:06 +02:00

api_page_analysis.rs

feat(analysis): position-aware OCR seam dedup for sliced pages

2026-06-13 23:17:55 +02:00

api_page_search.rs

feat(analysis): position-aware OCR seam dedup for sliced pages

2026-06-13 23:17:55 +02:00

api_page_tags.rs

feat(analysis): add ocrs OCR backend and OCR-driven page text search

2026-06-30 19:52:43 +02:00

api_preferences.rs

feat: continuous reader mode with persisted preference

2026-05-17 13:15:03 +02:00

api_private_mode.rs

fix: don't mark private-mode blobs as publicly cacheable

2026-07-07 21:39:20 +02:00

api_reactions.rs

feat(reactions): per-user like/dislike on mangas

2026-07-05 16:54:11 +02:00

api_recommendations.rs

feat(recommendations): content-based "Recommended for you" endpoint

2026-07-05 17:42:05 +02:00

api_tags.rs

refactor(clippy): fix the never-loop error and clear all lint warnings

2026-07-02 20:45:37 +02:00

api_uploads.rs

fix: cache immutable blobs served from /files

2026-07-07 20:30:03 +02:00

crawl_metrics.rs

feat(admin): observability — job history, live now-analyzing, durations & metrics (0.84.0) (#6)

2026-06-16 12:21:13 +00:00

crawler_browser_smoke.rs

fix: opt-in CDP re-validation of headless-browser navigations (SSRF)

2026-07-08 06:29:17 +02:00

crawler_daemon.rs

fix: don't burn a job attempt when the browser is unavailable

2026-07-11 13:55:50 +02:00

crawler_dead_jobs.rs

feat(crawler): reconcile pass to enqueue mangas missing from the DB (0.85.0)

2026-06-19 11:15:11 +02:00

crawler_jobs.rs

fix(crawler): reap dead jobs alongside done ones

2026-07-03 21:16:56 +02:00

crawler_reconcile.rs

feat(crawler): reconcile pass to enqueue mangas missing from the DB (0.85.0)

2026-06-19 11:15:11 +02:00

crawler_recovery_flag.rs

feat(crawler): single-mode walker gated by recovery flag (0.36.0)

2026-05-29 23:49:28 +02:00

crawler_sync.rs

fix: interleave uploaded chapters by number in the chapter list

2026-07-11 14:17:18 +02:00

health.rs

feat: nest API under /api/v1, structured error envelope, paged lists

2026-05-16 21:41:20 +02:00

repo_chapter.rs

feat(admin): crawler observability dashboard + reliability hardening (0.55.0)

2026-06-06 18:49:56 +02:00

repo_session.rs

fix: reap expired sessions with a periodic background sweep

2026-07-13 20:19:41 +02:00