Agent connections authenticate at the channel join level with token validation, so they should not be subject to IP-based brute force protection. This prevents legitimate agents from being banned when connecting to the server. Changes: - Exempt /socket/agent/websocket from all IP ban checks - Update documentation to reflect agent exemption - Agents still authenticate securely via token during channel join |
||
|---|---|---|
| .. | ||
| api_auth.ex | ||
| brute_force_protection.ex | ||
| capture_timezone.ex | ||
| check_policy_consent.ex | ||
| detect_eu_user.ex | ||
| graphql_introspection.ex | ||
| mobile_auth.ex | ||
| rate_limit.ex | ||
| remote_ip_logger.ex | ||
| security_headers.ex | ||
| update_session_activity.ex | ||
| webhook_auth.ex | ||