Skip to content

fix(atlas): enforce mutation endpoint rate limits + heartbeat timestamp safety#69

Merged
Scottcjn merged 1 commit intoScottcjn:mainfrom
sungdark:fix/rate-limit-mutation-endpoints
Feb 27, 2026
Merged

fix(atlas): enforce mutation endpoint rate limits + heartbeat timestamp safety#69
Scottcjn merged 1 commit intoScottcjn:mainfrom
sungdark:fix/rate-limit-mutation-endpoints

Conversation

@sungdark
Copy link
Contributor

@sungdark sungdark commented Feb 27, 2026

Summary

  • add write-rate-limit enforcement to remaining relay mutation endpoints:
    • POST /relay/register
    • POST /relay/heartbeat
    • POST /relay/message
    • POST /relay/identity/rotate
    • POST /relay/identity/revoke
  • initialize now before heartbeat auto-register path to avoid undefined timestamp usage

Why

rustchain-bounties#389 requests per-IP rate limiting across mutation endpoints plus bounded/cleaned limiter behavior. This completes coverage for endpoints that were still unguarded.

Validation

  • python3 -m py_compile atlas/beacon_chat.py

Refs: Scottcjn/rustchain-bounties#389

@sungdark sungdark requested a review from Scottcjn as a code owner February 27, 2026 06:14
@github-actions github-actions bot added the size/S PR: 11-50 lines label Feb 27, 2026
@Scottcjn Scottcjn merged commit ec00f0e into Scottcjn:main Feb 27, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/S PR: 11-50 lines

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants