Repository navigation

Harden backend auth: scoped rate limiting, trusted proxies, and API key scopes/expiry - #998

Merged

levoski1 merged 4 commits into

WHEELBACK:mainfrom

bidexbusuyi-eng:drips/971-972-973-974

Oct 21, 2026

Merged

Harden backend auth: scoped rate limiting, trusted proxies, and API key scopes/expiry#998
levoski1 merged 4 commits into
WHEELBACK:mainfrom
bidexbusuyi-eng:drips/971-972-973-974

Commits on Oct 20, 2026
- fix: #971 Rate-limit by authenticated merchant identity
  bidexbusuyi-eng
  committed
  4c547ac
- fix: #972 Make trusted-proxy handling explicit
  bidexbusuyi-eng
  committed
  7aca426
- fix: #973 Add scopes to merchant API keys
  bidexbusuyi-eng
  committed
  508d806
- fix: #974 Add API-key expiry and last-used metadata
  bidexbusuyi-eng
  committed
  0c53240