towerops/lib/towerops_web/plugs
Graham McIntire 8f52d87854
feat: add rate limiting to admin endpoints (100 req/min)
- Add :admin type to RateLimit plug with 100 requests per minute per IP
- Apply rate limiting to all /admin routes (LiveView and controller actions)
- Protects superuser endpoints from abuse and brute force attempts
- Aligns with existing auth (10 req/min) and API (1000 req/min) limits
2026-03-05 14:11:19 -06:00
..
api_auth.ex refactor: use API token auth for profile imports instead of session cookies 2026-01-18 09:30:21 -06:00
brute_force_protection.ex chore: remove unused functions from disabled brute force protection 2026-03-04 16:57:48 -06:00
capture_timezone.ex Use detected timezone from session in user registration 2026-02-01 12:18:33 -06:00
check_policy_consent.ex gdpr consent tracking 2026-01-29 11:12:35 -06:00
detect_eu_user.ex snmp v3 support 2026-02-04 12:02:38 -06:00
filter_noisy_logs.ex fix: comprehensive bug fixes from reliability audit 2026-03-05 08:53:30 -06:00
graphql_introspection.ex Security fixes: mask credentials in logs/API, fix cookie/CSP/LIKE injection/webhooks 2026-02-15 09:09:04 -06:00
mobile_auth.ex Add comprehensive Dialyzer type specifications 2026-01-17 10:52:02 -06:00
rate_limit.ex feat: add rate limiting to admin endpoints (100 req/min) 2026-03-05 14:11:19 -06:00
remote_ip_logger.ex nif ci fixes and dialyzer fixes 2026-01-30 12:38:50 -06:00
security_headers.ex Security hardening: remaining audit fixes 2026-02-15 12:54:38 -06:00
update_session_activity.ex fix: netbox url field type, gaiia ipRange→block, remove unknown webhook log 2026-02-14 17:44:01 -06:00
webhook_auth.ex Add CI-triggered mass agent update webhook 2026-02-10 13:40:32 -06:00